Pegasus

Black Pegasus Removal Instructions:
(Tools needed HijackThis and RRT)

1. Una sa lahat kailangan nyong i-terminate ang process ng virus using HijackThis’ Process View, dahil kung hindi, babalik at babalik din yung mga virus backup files na idede-delete nyo. Terminate nyo ang process ng virus (c:\Windows\Systen32\SVCHOST.EXE).
2. Use RRT to remove restrictions from your PC, check all check box then press remove button.
3. Pag na end nyo na ang process ng virus… simulan na natin ang pag delete sa mga virus backup files. PLEASE TAKE NOTE OF THE FILE PATH, baka kasi iba ma delete nyong file… it would cause you trouble. Pag di nyo makita ang file na naka lista sa baba… just skip.

• Delete WINLOGON.EXE found in "c:\Program Files\System\" folder.
• Delete SVCHOST.EXE found in "c:\Windows\Systen32\" folder.
• Delete SVHOST.EXE found in "c:\Windows\System32\" folder.
• Delete LSASS.EXE found in "c:\Windows\" folder.
• Delete DRACU.EXE found in "c:\Windows\" folder.
• Delete PROGGY.EXE found in "c:\Program Files\" folder.
• Delete ISETUP.EXE found in "c:\Windows\System32\" folder.
• Delete TRANSMIT.EXE found in "c:\Windows\System32\" folder.
• Delete P364SUS.DAT found in "c:\Windows\System32\" folder.
• Delete DIFFUSE.DAT found in "c:\Windows\System32\" folder.
• Delete ISETUP.EXE, TRANSMIT.EXE and AUTORUN.INF found in the root directory of your local drives (eg. C:\, D:\, E:\.. etc.)
• And you’re done…

May tip lang ako, mostly mga virus ngayon ay transmitted thru USB Flash Disk, ingat kayo sa pag open ng mga files sa USB. Kung mag lagay kayo ng USB sa PC nyo WAG KAYONG mag Double-Click sa My Computer na shotcut sa inyong Desktop. Ang gawin e-right-click nyo lang tulad halimbawa nito:

Then click the Removable Drive….

IMPORTANT: IWASAN NYONG MAG DOUBLE-CLICK SA MGA REMOVABLE DRIVES, AT SAKA INGAT DIN SA RIGHT-CLICK MENU!

This entry was posted on Saturday, February 23rd, 2008 at 12:14 am and is filed under Web/Tech. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.