This is a spyware where creates files of the name like h.cmd, xn1i9x.com, ylr.exe, awda2.exe etc and creates an associated autorun.inf file which executes these files. Simply deleting these files along with autorun.inf wont work as they are recreated after some time. This happens because it has created an entry in the startup folder. You need to remove it and once that is done just delete all the malicious files present on each of your drive. They wont be recreated after that.
The startup entry can be present in the various possible location.
click here to get detailed description of these places
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment