Skype (windows) virus and how to fix it
Right now, with incredible speed, a viral file “ YOUR-MOTHER-NAKED-hahahaha.pif ” is being sent via Skype. If you, due to negligence, opened it, then it was automatically sent to all users from your contact list.
Here are the steps to help remove the infection:
1) Restart your computer and enter Safe Mode ( F8 when booting)
2) Log in under the account in which the virus was picked up
3) Open Task Manager (Ctrl + Alt + Del) and check if the winservice process is running (if yes, kill it).
4) You need to erase the same sinister file that you took on skype - YOUR-MOTHER-NAKED-hahahaha.pif
5) Clear the Temp directory (Windows Vista: C: \ Users \% username% \ AppData \ Local \ Temp and Windows XP: C: \ Documents and Settings \% username% \ Local Settings \ Temp )
6) Clear the Recycle Bin (if files were not deleted via Shift + Delete )
7) Enter the registry editor ( Start -> Run -> regedit and press Enter). Next, look for HKEY_CURRENT_USER -> Software -> Microsoft -> Windows -> CurrentVersion -> Run and erase the entry with the name winservice
8) From the C: / Windows / Prefetch folder, delete all files that start with three digits and end with the .pf extension (for example: 834.exe-8448tthurdd895.pf) , as well as the mother-nude ... ..exe-ggjoret590gu.pf and other files that contain words such as nude , naked , etc.
9) Clean up Recycle Bin again
10) We reboot the computer and go in as usual.
Here are the steps to help remove the infection:
1) Restart your computer and enter Safe Mode ( F8 when booting)
2) Log in under the account in which the virus was picked up
3) Open Task Manager (Ctrl + Alt + Del) and check if the winservice process is running (if yes, kill it).
4) You need to erase the same sinister file that you took on skype - YOUR-MOTHER-NAKED-hahahaha.pif
5) Clear the Temp directory (Windows Vista: C: \ Users \% username% \ AppData \ Local \ Temp and Windows XP: C: \ Documents and Settings \% username% \ Local Settings \ Temp )
6) Clear the Recycle Bin (if files were not deleted via Shift + Delete )
7) Enter the registry editor ( Start -> Run -> regedit and press Enter). Next, look for HKEY_CURRENT_USER -> Software -> Microsoft -> Windows -> CurrentVersion -> Run and erase the entry with the name winservice
8) From the C: / Windows / Prefetch folder, delete all files that start with three digits and end with the .pf extension (for example: 834.exe-8448tthurdd895.pf) , as well as the mother-nude ... ..exe-ggjoret590gu.pf and other files that contain words such as nude , naked , etc.
9) Clean up Recycle Bin again
10) We reboot the computer and go in as usual.
')
Source: https://habr.com/ru/post/50007/
All Articles