How to kill brontok.a virus manually? Tell me about it.

This virus is a variant of Brontok. It will copy its About page. Brontok.a.html "enters my document/picture collection directory, and it will pop up automatically from time to time, and a blank page will pop up. His spread is extremely fast.

This is a worm that spreads by mail. Changing the worm will produce a large number of duplicate files. The virus will search a large number of text files on the user's machine to get the email address and send its own copy to the searched email address.

1. Generate file:

%WinDir%\ShellNew\bronstab.exe

%WinDir%\eksplorasi.exe

% System% \ Administrator Settings. scr

% windows root % \ Tasks \ at 1 . job

% User % \ Application Data \ bron . Tok- 10- 18

% User% \ application data \csrss.exe

% User% \ application data \lsass.exe

% User % \ Application Data \ services . exe

% User % \ Application Data \ inetinfo . exe

% start %\Empty.pif

C:\AUTOEXEC。 Bachelor of Arts in Teaching (Basic Armor Training) B.A.T. Industries PLC (the world's largest cigarette company in Britain)

2. Add a registry to start the virus:

HKLM \ Software \ Microsoft \ Windows NT \ Current version \Winlogon

shell

" explorer . exe " C:\ WINNT \ eksplorasi . exe " "

HKLM \ System \ Current Control Set \ Service \ Plan

NextAtJobId

dword:00000002

3. The virus will traverse the hard disk, search for files with the following suffixes, and get the e-mail address:

Suffix of html file

Hypertext markup language

Textfile (textfile)

Western aphasia test set

active server pages

Server-side programming language (abbreviation of professional hypertext preprocessor)

Cathode-Follower Mixer

Combat support vehicle

Department of Communications.

And the sender will confuse the user by pretending to be as follows:

Berita_XXX@kafegaul.com

GaulNews_XXX@kafegaul.com

Movie_XXX@playboy.com

HotNews_XXX@playboy.com

In "About". Brontok.a.html "document, which is written in green characters on a white background, is as follows.

Brontok A

-It's a black policy-

1. Krupto, Peng Yellen Dupu, Suap. Port NARKOBA

(sent to "NUSAKAMBANGAN")

2. Stop free sex and abortion. prostatitis

(Go to hell)

3. Stop pencemaran lingkungan, Pembakaran Hutan & Peruvian liar.

4. Say no to drugs! ! !

-Kiamat Sudakat-

Terinspirasi oleh:

Spizaetus Cirrhatus

[Author: HVM3 1]

-JowoBot #VM community

You can find the killing tools online. Rising has tools for killing this virus, and most of the others are from abroad.