The phenomenon of "AV Terminator" poisoning infection
1. Generate many 8-digit or random-named virus program files, and automatically run when the computer is powered on.
2. Kidnapping security software, poisoning will find almost all anti-virus software, System management tools, Anti-spyware software can not start normally. Even if you manually remove the virus program, the next time you start the software, it will also error.
3. The hidden file cannot be displayed properly, and its purpose is to better conceal itself from being found.
4. Disable Windows Automatic Updates and Windows Firewall so that when the Trojan is working, there is no hint window to bounce out. Open the door for the next damage to the virus.
5. Damage system security mode, so that users can not boot system to safe mode to maintain and repair
6. Viruses close these windows when there are antivirus, security, and community-related keywords in the active window. If you want to search through the browser for virus-related keywords, the browser window will automatically close.
7. In the local hard disk, U disk or mobile hard drive to generate Autorun.inf and the corresponding virus program files, through the automatic playback function to spread. Note here that many users formatted the system partition after reloading, access to other disks, immediately again poisoned, users will feel that the virus format is not used.
8. The ultimate goal of the virus program is to download more trojans, backdoor programs. The user's final loss depends on these Trojans and backdoor procedures.
4-Step solution after "AV Terminator" poisoning
Because the virus will also attack Jinshan poison PA, has poisoned the computer will be issued with Jinshan poison PA can not start, double-click no response. Manual resolution is quite difficult, and, AV Terminator is a batch of viruses, can not simply through the analysis of the report manually deleted. We recommend the following cleanup steps:
1. On the computer can be normal access to the Golden Hill poison Bully website download av terminator virus Kill tool
2. Prohibit the automatic playback function on the normal computer, in order to avoid being infected by the virus by inserting a U disk or moving hard disk, the AV terminator kills the tool from the normal computer to copy to U disk or mobile hard disk, then copy to the poisoned computer.
3. Perform AV terminator kill tool, clear known virus, repair by system configuration.
(Note: The important function of AV terminator tools is to repair damaged systems, including repairing image hijacking, repairing damaged security mode, repairing hidden folders, and removing AutoPlay configurations for individual partitions.) )
4. Do not restart the computer immediately, and then start anti-virus software, upgrade the virus library, for a comprehensive scan. To clear the Trojans download other viruses downloaded.