<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Kedar's Tech Blog &#187; Virus</title>
	<atom:link href="http://blog.softricks.com/category/virus/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.softricks.com</link>
	<description>Technology! Can't get enough of it!!</description>
	<lastBuildDate>Mon, 09 Aug 2010 03:32:34 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>AV Security / news-11-today Virus</title>
		<link>http://blog.softricks.com/av-security-news-11-today-virus</link>
		<comments>http://blog.softricks.com/av-security-news-11-today-virus#comments</comments>
		<pubDate>Sun, 20 Jun 2010 04:33:05 +0000</pubDate>
		<dc:creator>Kedar</dc:creator>
				<category><![CDATA[Computers]]></category>
		<category><![CDATA[Virus]]></category>

		<guid isPermaLink="false">http://blog.softricks.com/?p=100</guid>
		<description><![CDATA[Recently, my Windows XP laptop got infected with this virus. Here is what happened &#8211; All of a sudden, a window would popup opening a link to http://www.news-11-today.com with some junk. Now I seriously suspect that this caused installation of this malware. After a little while, a fake warning message appeared, followed by a fake [...]]]></description>
			<content:encoded><![CDATA[<p>Recently, my Windows XP laptop got infected with this virus. Here is what happened &#8211; </p>
<p>All of a sudden, a window would popup opening a link to http://www.news-11-today.com with some junk. Now I seriously suspect that this caused installation of this malware. After a little while, a fake warning message appeared, followed by a fake virus scan. And everything after that was an attack. It did not allow me to open any applications that can potentially kill it.</p>
<p>Just Google &#8220;AV Security virus&#8221; and you can get the exact info. I will just say what worked here.</p>
<p>1. First of all, download the &#8220;Malware Bytes Anti-Malware&#8221; from http://www.malwarebytes.org/mbam.php (download the free version) from a non-infected computer and copy it to a USB drive.</p>
<p>2. Shutdown the infected computer. Start it, and AS SOON AS windows taskbar appears (don&#8217;t wait for the tray icons), right click on it and start Task manager. This way, the malware won&#8217;t be able to prevent you from starting Task Manager later. As the startup finishes, see the Applications in the Task Manager and kill the malware app from here.</p>
<p>3. Now insert the USB drive with this Anti-Malware software, install it on the infected machine and run it. Let it scan the whole computer. Most probably, it will clean a few registry entries and an executable in your Documents and Settings\<user>\Local Settings\Application Data\[random letters]\[random letters].exe.</p>
<p>You could instead go into Windows safe mode and run this Anti-Malware software from there, instead of having to perform steps in 2. &#038; 3. </p>
]]></content:encoded>
			<wfw:commentRss>http://blog.softricks.com/av-security-news-11-today-virus/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

