Flint_ta
Сообщений: 3720
Оценки: 1120
Присоединился: 2007-01-26 15:49:18.323333
|
It is a worm and there are other programs (like perfum.exe) with same logic. It produces viruses. it is transferred by memory sticks. Anti virus programs can recognize and delete produced viruses and virus code in the program. However they can not delete the program.
Solution is like that
1-Start the computer with safe mode by pressing F8 before windows start and after bios opening.
2-My Computer >Tools> Folder Options >View
Hidden files and folders> Show hidden files
Remove tick "Hide extensions for known file types"
Remove tick "Hide protected operating system files (recommended)"
So you can see hidden and system folders in C:\Driver.
There are 4 hidden folders which are seen in infected computers
RESTORE
SYSTEM
RECYCLER
CONFIG
Delete them with shift+Del and restart computer.
After restarting the computer you should delete quarantined items in your anti virus program.
For protection
-Do not use other people memory sticks.
-Clear your memory sticks by shift deleting above folders plus auto.inf file. (Best is formatting them)
-Active your writing lock in your memory sticks (choose memory stick with these lock while purchasing) for file transfering with other computers so your memory stick do not get infected.
—————————————————-
go to windows folder then system32 and search for file called nvdm.exe delete it and it will stop these application from running.
update your Antivirues and scan your computer and after you finish copy the file nvdm._ex from your windos CD and it will works.
( The main problem is NVDM file has damage and also has changed its extention to .exe from _ex
|
то ли вирус то ли какаято прога - 
