ไฟล์ที่ใช้ทดสอบ : birdie_sfdhgdaee_b.exe
0.98 MB (1,036,288 bytes)
MD5: A993D3B16B06150793D7704138BB183E
SHA-1: 0537338CED4B75268ADFDE7193B2AC3FA7024E21
------------------------------------------------------------------------------
66188534.exe (Fake alert : Security Tool)
1.00 MB (1,049,600 bytes)
MD5: 26F36C3675479CAA7EAD201024768669
SHA-1: 186111FC8711EEEA39E7BC257D137B573FF3EC88
=======================================================
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| a-squared | 4.5.0.50 | 2010.02.23 | - |
| AhnLab-V3 | 5.0.0.2 | 2010.02.23 | - |
| AntiVir | 8.2.1.172 | 2010.02.23 | Worm/Koobface.fy |
| Antiy-AVL | 2.0.3.7 | 2010.02.23 | - |
| Authentium | 5.2.0.5 | 2010.02.23 | - |
| Avast | 4.8.1351.0 | 2010.02.23 | - |
| AVG | 9.0.0.730 | 2010.02.23 | - |
| BitDefender | 7.2 | 2010.02.23 | - |
| CAT-QuickHeal | 10.00 | 2010.02.23 | - |
| ClamAV | 0.96.0.0-git | 2010.02.23 | - |
| Comodo | 4036 | 2010.02.23 | - |
| DrWeb | 5.0.1.12222 | 2010.02.23 | - |
| eSafe | 7.0.17.0 | 2010.02.23 | - |
| eTrust-Vet | 35.2.7323 | 2010.02.23 | - |
| F-Prot | 4.5.1.85 | 2010.02.22 | - |
| F-Secure | 9.0.15370.0 | 2010.02.23 | - |
| Fortinet | 4.0.14.0 | 2010.02.21 | - |
| GData | 19 | 2010.02.23 | - |
| Ikarus | T3.1.1.80.0 | 2010.02.23 | - |
| Jiangmin | 13.0.900 | 2010.02.23 | - |
| K7AntiVirus | 7.10.980 | 2010.02.22 | - |
| Kaspersky | 7.0.0.125 | 2010.02.23 | - |
| McAfee | 5900 | 2010.02.22 | - |
| McAfee+Artemis | 5900 | 2010.02.22 | - |
| McAfee-GW-Edition | 6.8.5 | 2010.02.23 | Worm.Koobface.fy |
| Microsoft | 1.5406 | 2010.02.23 | - |
| NOD32 | 4890 | 2010.02.23 | - |
| Norman | 6.04.08 | 2010.02.23 | - |
| nProtect | 2009.1.8.0 | 2010.02.23 | - |
| Panda | 10.0.2.2 | 2010.02.22 | - |
| PCTools | 7.0.3.5 | 2010.02.23 | - |
| Prevx | 3.0 | 2010.02.23 | Low Risk Adware |
| Rising | 22.34.01.03 | 2010.02.11 | - |
| Sophos | 4.50.0 | 2010.02.23 | Mal/FakeVirPk-A |
| Sunbelt | 5694 | 2010.02.23 | - |
| Symantec | 20091.2.0.41 | 2010.02.23 | Trojan.FakeAV!gen13 |
| TheHacker | 6.5.1.6.206 | 2010.02.23 | - |
| TrendMicro | 9.120.0.1004 | 2010.02.23 | Cryp_Krap-9 |
| VBA32 | 3.12.12.2 | 2010.02.23 | - |
| ViRobot | 2010.2.23.2198 | 2010.02.23 | - |
| VirusBuster | 5.0.27.0 | 2010.02.23 | - |
-------------------------------------------------------------------------------
------------------------------------------------------------------------
วิธีกำจัด/แก้ไข : 66188534.exe (Fake alert : Security Tool)
------------------------------------------------------------------------
1. กดปุ่ม Ctrl + Alt+Del แล้ว เลือก End process ไฟล์ 66188534.exe
2. เปิดโปรแกรม ExplorerXP
แล้วเข้าไป Delete folder ชื่อ 66188534 ที่อยู่ใน
C:\Documents and Settings\All Users\Application Data\66188534\
3. ไปที่ Start > Program แล้ว Delete Security Tool (shortcut)
4. ใช้ HijackThis fix checked ที่
O4 - HKLM\..\Run: [66188534] C:\DOCUME~1\ALLUSE~1\APPLIC~1\66188534\66188534.exe
5. click ที่ Satrt > Run >พิมพ์ Regedit.exe
แล้วไป Delete Key HKLM\SOFTWARE\66188534
No comments:
Post a Comment