PSW. WIN32.MAGANIA.FFW (F3C74E3FA248.exe) Virus removal _ virus killing

1, release the virus file:


C:\WINDOWS\Help


F3C74E3FA248.dll 143872 bytes

F3C74E3FA248.exe 74532 bytes


2. Add Startup items:


Registrykey:hklm\software\microsoft\windows\currentversion\explorer\shellexecutehooks

Registry value: {1dbd6574-d6d0-4782-94c3-69619e719765}

Type:reg_sz


3, using hook technology to record the mouse, keyboard operation, stealing online games account password.


4. Release: C:\windows\1.bat


Deletes itself.


Workaround:


1, download Sreng, directly on the desktop, and then disconnect the network.


2, open Sreng, delete the startup item:


{1dbd6574-d6d0-4782-94c3-69619e719765}


3, restart the computer, delete files:


C:\WINDOWS\Help


F3C74E3FA248.dll 143872 bytes

F3C74E3FA248.exe 74532 bytes


4, modify QQ, online games, mailboxes and other passwords.