New type of Destop.ini Virus Creating critical problems

[srini]

Hi,

Please help me to solve this problem...

"I got a new file created in all folder it names "desktop_.ini". I
can't delete this file.

Please do the needful.

Thanks in Advance.
Srinivasan, H.

 

[FreeComputerConsultant.com]

Sounds like a virus I've read about.

Clean your systems
http://www.freecomputerconsultant.com/clean-pc.html

 

[Poprivet]

Hi,

Please help me to solve this problem...

"I got a new file created in all folder it names "desktop_.ini". I
can't delete this file.

Please do the needful.

Thanks in Advance.
Srinivasan, H.

It's a virus; read about it here. Then, get a good AV program and keep it
updated!

Includes removal instructions.
http://www.symantec.com/security_response/writeup.jsp?docid=2007-010509-0134-99&tabid=2

 

[Guest]

Hi,

Please help me to solve this problem...

"I got a new file created in all folder it names "desktop_.ini". I
can't delete this file.

Please do the needful.

Thanks in Advance.
Srinivasan, H.

Hi,

Please help me to solve this problem...

"I got a new file created in all folder it names "desktop_.ini". I
can't delete this file.

Please do the needful.

Thanks in Advance.
Srinivasan, H.

http://malware-test.com/weblog/2007/01/25/the-web-pages-of-hytv-are-inserted-malicious-links/

Also try to clean up the running processes in the registry here:
Open a run command and type in:
regedit.exe click [OK] on the Registry Editor locate these Keys:
[-] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =

Delete these running process:
iexpl0re.exe
Deskto_ini.exe

[-] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Explorer\Main =
Delete this URL ( it will be without NOT just because in an Open NG for
safty of users) httpNOT://wwwNOT.krvkr.com

[-]HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =

Delete these running process:
iexpl0re.exe
Deskto_ini.exe

[-]HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet
Explorer\Main =
Delete this URL ( it will be without NOT just because in an Open NG for
safty of users) httpNOT://wwwNOT.krvkr.com

Run Scan for Viruses in Both Safe Mode and Normal Mode and Run Disk CleanUp
on your Hard Drive.
HTH.
nass