Avterminator virus phenomenon, transmission methods, and Prevention Measures

The following articles mainly describe the comprehensive analysis of the avterminator virus. We all know that avterminator refers to the following destructive viruses, Trojans, and worms. Infected computers will find that anti-virus software cannot be started, and double-click does not respond. Manual solution is quite difficult, and avterminator is a batch of viruses and cannot be manually deleted simply by analyzing reports. We recommend the following steps:

About avterminator

Kingsoft drug overlord Customer Service Center recently received a large number of users asking for help. user feedback is similar: anti-virus software is not available. If you want to use search engines to find some solutions, enter anti-virus, and the browser window will be closed. In Kingsoft drug overlord forum, a large number of users have the same or similar responses. In Zhuhai, the drug overlord R & D department has detected the spread of such viruses. Monitoring detects a series of anti-virus software, destroys the system security mode, and embeds viruses in the Trojan download device. This type of virus is named "avterminator". avterminator refers to a group of viruses, Trojans, and worms with the following destructiveness.

Virus symptom

1. generate many virus program files named randomly by 8 digits or letters and run automatically when the computer starts up.

2. Kidnapping security software. Almost all anti-virus software, system management tools, and anti-spyware software cannot be started normally after being poisoned. Even if you manually delete a virus program, an error is reported the next time you start the software.

3. The hidden file cannot be displayed normally, so as to better hide itself from being discovered.

4. Disable windows automatic update and Windows Firewall, so that no Prompt window pops up when the trojan is working. This opens the door for further damage to the virus.

5. damage the system security mode, so that users cannot start the system to the security mode for maintenance and repair

6. When the active window contains keywords related to antivirus, security, and community, the virus closes these windows. If you want to search for keywords related to viruses in the browser, the browser window will automatically close.

7. autorun. inf and corresponding virus program files are generated on the local hard drive, USB flash drive, or mobile hard drive and spread through the automatic playback function. It should be noted that many users reload the system partition after formatting, access other disks, and immediately become poisoned again. Users will feel that the virus formatting is useless.

8. The ultimate goal of a virus program is to download more Trojans and Backdoor programs. The final loss of users depends on these Trojans and backdoors.

Propagation mode

1. spread through the automatic playback function of USB flash disks and mobile hard disks

2. The original source of avterminator is to use website vulnerabilities to download and spread through a large number of hijacking network sessions. It is related to the virus flooding of ARP attacks some time ago.

Kingsoft's anti-virus solution

Because the virus will also attack Kingsoft drug overlord, the computer that has been poisoned will find Kingsoft drug overlord cannot be started, double-click did not respond. Manual solution is quite difficult, and avterminator is a batch of viruses and cannot be manually deleted simply by analyzing reports. We recommend the following steps:

1. log on to Kingsoft drug overlord website on a computer that can access the Internet and download the avterminator virus killing tool.

: Http://zhuansha.duba.net/259.shtml

2. Disable automatic playback on a normal computer to avoid virus infection by inserting a USB flash drive or a mobile hard disk. Copy the avterminator killer tool from a normal computer to a USB flash disk or a mobile hard disk, and then to a computer that is infected with viruses.

3. Run the avterminator killing tool to clear known viruses and fix system configurations.

(Note: The avterminator exclusive tool is used to repair damaged systems, including image hijacking and the damaged security mode; fixed the problem of hiding the normal display of folders and deleting the automatic playback configuration of each disk partition .)

4. Do not restart your computer immediately, then start anti-virus software, upgrade the virus database, and perform full scanning. To clear other viruses downloaded by the Trojan downloader.

Preventive Measures

Once the avterminator virus is infected, the removal process is quite complex and may be reinstalled by many users. We recommend that you do not reinstall the system easily and use the recommended steps to clear the system. If necessary, call customer service to request support. Take the following measures to prevent the avterminator Virus

1. The use of Kingsoft network firewall or Windows Firewall can effectively prevent network viruses from intrusion by means of hacker attacks.

2. Use Kingsoft's vulnerability repair function or windows update to fix system vulnerabilities. Pay special attention to installing the latest browser patch.

3. Upgrade anti-virus software and enable real-time monitoring

4. The network management system takes comprehensive measures to prevent ARP attacks from Trojans.

5. Disable automatic playback for windows.