ไฟล์ที่ใช้ทดสอบ : install.exe
69937236.exe (Fake alert : Security Tool)
0.98 MB (1,031,168 bytes)
MD5: 985798FDEAFBB7A85056ECA7EF1C3BC4
SHA-1: 33B6ACBFCF4B3295573A639F92E740161B4F8503
=======================================================
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| a-squared | 4.5.0.50 | 2010.02.19 | - |
| AhnLab-V3 | 5.0.0.2 | 2010.02.19 | - |
| AntiVir | 8.2.1.170 | 2010.02.19 | Worm/Koobface.eyz |
| Antiy-AVL | 2.0.3.7 | 2010.02.19 | - |
| Authentium | 5.2.0.5 | 2010.02.19 | - |
| Avast | 4.8.1351.0 | 2010.02.19 | - |
| AVG | 9.0.0.730 | 2010.02.19 | - |
| BitDefender | 7.2 | 2010.02.19 | Trojan.FakeAV.AEV |
| CAT-QuickHeal | 10.00 | 2010.02.19 | - |
| ClamAV | 0.96.0.0-git | 2010.02.19 | - |
| Comodo | 3990 | 2010.02.19 | TrojWare.Win32.FraudTool.ST.~GGI |
| DrWeb | 5.0.1.12222 | 2010.02.19 | - |
| eSafe | 7.0.17.0 | 2010.02.18 | - |
| eTrust-Vet | 35.2.7313 | 2010.02.19 | - |
| F-Prot | 4.5.1.85 | 2010.02.18 | - |
| F-Secure | 9.0.15370.0 | 2010.02.19 | - |
| Fortinet | 4.0.14.0 | 2010.02.18 | - |
| GData | 19 | 2010.02.19 | Trojan.FakeAV.AEV |
| Ikarus | T3.1.1.80.0 | 2010.02.19 | - |
| Jiangmin | 13.0.900 | 2010.02.19 | - |
| K7AntiVirus | 7.10.977 | 2010.02.18 | - |
| Kaspersky | 7.0.0.125 | 2010.02.17 | - |
| McAfee | 5896 | 2010.02.18 | FakeAlert-LX |
| McAfee+Artemis | 5896 | 2010.02.18 | FakeAlert-LX |
| McAfee-GW-Edition | 6.8.5 | 2010.02.19 | Worm.Koobface.eyz |
| Microsoft | 1.5406 | 2010.02.18 | - |
| NOD32 | 4879 | 2010.02.19 | - |
| Norman | 6.04.08 | 2010.02.18 | - |
| nProtect | 2009.1.8.0 | 2010.02.19 | - |
| Panda | 10.0.2.2 | 2010.02.19 | Suspicious file |
| PCTools | 7.0.3.5 | 2010.02.19 | - |
| Prevx | 3.0 | 2010.02.19 | - |
| Rising | 22.34.01.03 | 2010.02.11 | - |
| Sophos | 4.50.0 | 2010.02.19 | - |
| Sunbelt | 5686 | 2010.02.19 | - |
| Symantec | 20091.2.0.41 | 2010.02.19 | Suspicious.Insight |
| TheHacker | 6.5.1.5.201 | 2010.02.19 | - |
| TrendMicro | 9.120.0.1004 | 2010.02.19 | Cryp_Krap-9 |
| VBA32 | 3.12.12.2 | 2010.02.18 | - |
| ViRobot | 2010.2.19.2193 | 2010.02.19 | - |
| VirusBuster | 5.0.27.0 | 2010.02.18 | - |
-------------------------------------------------------------------------------
------------------------------------------------------------------------
วิธีกำจัด : 69937236.exe (Fake alert : Security Tool)
------------------------------------------------------------------------
1. กดปุ่ม Ctrl + Alt+Del แล้ว เลือก End process ไฟล์ 69937236.exe
2. เปิดโปรแกรม ExplorerXP
แล้วเข้าไป Delete folder ชื่อ 69937236 ที่อยู่ใน
C:\Documents and Settings\All Users\Application Data\69937236\
3. ไปที่ Start > Program แล้ว Delete Security Tool (shortcut)
4. ใช้ HijackThis fix checked ที่
O4 - HKLM\..\Run: [69937236] C:\DOCUME~1\ALLUSE~1\APPLIC~1\69937236\69937236.exe
5. click ที่ Satrt > Run >พิมพ์ Regedit.exe
แล้วไป Delete Key HKLM\SOFTWARE\69937236
-------------------------------------------------------------------------
No comments:
Post a Comment