How to remove d1vmq.exe

d1vmq.exe , urretnd.exe
Files size 108,840 bytes
MD5: AF5E5D4AF3655E16AF64D77188F275EA
SHA-1: BC0710CE807B3DFB2D166B94987AD60FD9B0B0AF
==================================================
Files Created
C:\Documents and Settings\[UserName]\Local Settings\Temp\ker1.tmp
C:\WINDOWS\system32\urretnd.exe
C:\WINDOWS\system32\optyhww0.dll(0-9)
X:\autorun.inf
X:\d1vmq.exe
(X:\ = C:\ - Z:\)

Registry Modifications
Value Added
HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
cbvcs = "%System%\urretnd.exe"

Values modified
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ Folder\Hidden\SHOWALL\CheckedValue: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ShowSuperHidden: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoDriveTypeAutoRun: 0x00000091

URL to be downloaded/data identified
http://vfgtyp.com/fm4/help.rar > %Temp%\help.rar >help.exe

=======================================================
วิธีกำจัด/แก้ virus : d1vmq.exe,urretnd.exe
=======================================================



No comments:

Post a Comment