elhacker.net cabecera Bienvenido(a), Visitante. Por favor Ingresar o Registrarse
¿Perdiste tu email de activación?.

 

 


Tema destacado: Guía actualizada para evitar que un ransomware ataque tu empresa


  Mostrar Mensajes
Páginas: [1]
1  Seguridad Informática / Seguridad / Re: ayuda virus sirefef en: 28 Marzo 2012, 20:16 pm
try this.. go into start menu
run
regedit
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce

remove any unusual programs in those registry keys
find the file that those key(s) point to on your hard disk and also remove the exe (trojan) or send it over to VXheavens for sampling

then see if it installed a rootkit (sys file) in one of these registry keys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\

BE VERY CAREFUL WITH YOUR REGISTRY, YOU COULD HOSE YOUR SYSTEM IF YOU DELETE THE WRONG ONES
Páginas: [1]
WAP2 - Aviso Legal - Powered by SMF 1.1.21 | SMF © 2006-2008, Simple Machines