Thursday, July 23, 2009

neo.vbe virus-in a tibuai che em?

Windows XP hmang i nih chuan i computer i tih nun hnu rei vak lo, Welcome tih lo lan hma vel siin "Don't play stupid wit me, I'm better at it!" tih emaw a lo lan chuan neo.vbe virus i kai tawh tihna a ni thei ang. Virus hlauhawm tak a ni hran lo naa, i khawla a luh tawh chuan i antivirus khan neo.vbe tih hi lo delete daih tawh pawh ni se registry a khawih danglam tawh avangin antivirus hmanga registry han siamthat ngawt theih a ni tawh lo a, chuvangin a hnuaia mi ang hian i ti dawn nia.

1. Task Manager hawng rawh. (Ctrl + Alt + Del)
Ctrl + Alt + Del hi a rualin hmet ang che.

2. Processes tihah khan 'wscript.exe' tih zawng la,
End Process ang che. (right click > end process)

3. Notepad hawng rawh.
(Click > Start > All Programs > Accessories > Notepad)

4. File tihah khan click la, Save As tih kha click leh rawh.

5. 'Save as type' tih box-ah khan, 'All Files' tih kha thlang ang che.

6. 'File name' box-ah khan "neo.vbe" (quote tel lo hian).

7. Desktop-ah save rawh.

8. Desktop-a neo.vbe tih file kha copy la, C:\WINDOWS\system32 -ah khan va paste tawp rawh.

9. File lo awm sa replace tur leh tur loh a rawn zawt ang a, replace turin 'Yes' ang che.

10. Registry editor-ah lut rawh (Click start > run > regedit tih chhu la, enter ang che)

11. A hnuaia mi hi click chhuak rawh.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

12. Panel dinglamah khan LegalNoticeCaption tih i hmu ang a, double click la, Value data tiha thu inziak kha delete vek ang che. (Value name-a mi kha chu delete a ngai lo)

13. Panel dinglamah bawk khan LegalNoticeText tih i hmu ang a, double click la, Value data tiha thu inziak kha delete vek ang che. (Value name-a mi kha chu delete a ngai lo)

14. Panel dinglamah tho khan Userinit tih kha double click leh la, Value data-ah khan C:\WINDOWS\system32\userinit.exe, tih loh zawng, hemi hnua thu inziak awm zawng kha (a awm a nih chuan) delete vek ang che.

C:\WINDOWS\system32\userinit.exe, hi coma thleng hian delete miah loh tur a ni. Hei hi i delete chuan i khawl a buai nghal ang. Fimkhur a ngai viau.

15. A hnuaia i hi click chhuak leh rawh.
HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies\Explorer

16. Panel dinglamah khan heng a hnuaia mi te hi i hmuh chuan i delete vek dawn nia. (right click delete)
NoSMHelp
NoStartMenuMFUprogramsList
NoSMMyDocs
NoRecentDocsMenu
NoSMMyPictures
NoStartMenuMyMusic

17. Click start > control panel > Internet options
Home page kha i duh danin thlak rawh.

18. Restart Computer