Scapa de Windows XP Repair, Windows Vista Repair si Windows 7 Repair – Ghid pentru Devirusare

Windows XP Repair este un program de optimizare fals dintr-o familie cuprinzatoare de virusi (Windows Vista Repair, Windows 7 Repair) ce afiseaza alerte enervante menite sa determine victima speriata sa cumpere produsul. Numai ca dupa achizitionare victima va ramane cu un software enervant si cu banii evaporati.

windows xp repair devirusare

Va afisa urmatoarele erori in timpul rularii:

Critical Error
RAM memory usage is critically high. RAM memory failure.

Critical Error
Windows can’t find hard disk space. Hard drive error

Critical Error
Hard Drive not found. Missing hard drive.

Windows XP Repair Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.

System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Low Disk Space
You are running very low disk space on Local Disk (C:).

Windows – No Disk
Exception Processing Message 0x0000013

Fisiere create

  • %AllUsersProfile%\Application Data\~
  • %AllUsersProfile%\Application Data\~r
  • %AllUsersProfile%\Application Data\.dll
  • %AllUsersProfile%\Application Data\.exe
  • %AllUsersProfile%\Application Data\
  • %AllUsersProfile%\Application Data\.exe
  • %UserProfile%\Desktop\Windows XP Repair.lnk
  • %UserProfile%\Start Menu\Programs\Windows XP Repair\
  • %UserProfile%\Start Menu\Programs\Windows XP Repair\Uninstall Windows XP Repair.lnk
  • %UserProfile%\Start Menu\Programs\Windows XP Repair\Windows XP Repair.lnk

Intrari registry create:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ‘0’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ‘0’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ‘1’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ‘0’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0′

DEVIRUSARE:

1. Porniti PC-ul in Safe Mode with Networking. Pentru aceasta restartati PC-ul si apasati tasta F8 de mai multe ori inainte de incarcarea Windows-ului pana obtineti ecranul de mai jos.
Dupa alegerea modului mentionat apasati tasta Enter si asteptati incarcarea completa a Windowsului.

safe mode

2. Descarcati Malwarebytes Anti-Malware. Redenumiti kitul de instalare in svchost.exe si apoi instalati-l. Nu-l rulati la finalul instalarii !!!

3. Navigati in folderul C:\Program Files\Malwarebytes’ Anti-Malware si redenumiti mbam.exe in explorer.exe.

4. Rulati noul fisier redenumit (explorer.exe) scanati PC-ul complet si stergeti la final infectiile gasite apasand Remove selected.

5. Descarcati Dr.Web Cureit! si scanati PC-ul:
http://www.freedrweb.com/cureit/?lng=en

Daca ai reusit sa cureti aceasta infectie, iti recomand sa cumperi versiunea PRO a Malwarebytes Anti-Malwarepentru a te proteja si pe viitor de astfel de amenintari, avand in vedere ca nu au fost detectate\eliminate de antivirusul tau actual.

Administrator FaraVirusi.com
voluntar al Comodo Malware Research Team, expert Malwarebytes Anti-Malware

5 responses to “Scapa de Windows XP Repair, Windows Vista Repair si Windows 7 Repair – Ghid pentru Devirusare”

  1. halou

    L-am avut si eu (l-am luat de pe un site de sanatate !!!!) si a trebuit sa fac apel la un specialist..metoda expusa de tine pare usoara , dar daca tii seama de faptul ca nu poti inchide/face sa dispara acea ‘alerta’ si nu poti misca nimic in computer , metoda expusa expusa de tine este inaplicabila..

  2. halou

    Am chemat pe cineva care mi-s rezolvat problema cu un programel luat de pe ‘bleepingcomputer’..fii amabil, imi poti spune cum intru in Safe Mode ? pentru orice eventualitate !!

  3. halou

    Upps! am gasit, merci!

  4. Amalia

    Aseara am patit si eu la fel, doar ca atunci cand intru in Safe Mode with Networking, nu imi apare niciun program. + ca asa e si la Windows 7, cand il pornesc.

Leave a Reply