Filukin manual removal:
Kill processes:
readme.exe, readme.doc.exe, document.doc.exe, info.doc.exe, data.doc.exe, taetae.txt.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\TANG_INA_MO=%System%\AutoRun.bat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NOYPI_KANG_ASTIG=%Windir%\exit to dosprompt.pif
Delete files:readme.exe, autorun.bat, mskernell.bat, exit to dosprompt.bat, readme.doc.exe, document.doc.exe, info.doc.exe, data.doc.exe, taetae.txt.exe
Misc:Filukin may distribute itself in executables with random names. Sometimes infected e-mail attachments have different extensions (not .exe, but .bat, .com or .scr).
Post Comment: