When you received a suspicious file from your friends or somewhere else, you might wonder is it a virus? So if you faced this problem, what will you do next? Ya, scan it with your antivirus program. Your antivirus program shows you that this file is safe to run. But, Is it really safe? I don't know because there is no the best antivirus program in the world(OK, I admit I like kaspersky ^_^) that can detect all the viruses.
Well now there's help and, best of all.
VirusTotal is an online antivirus scanner that can scan any suspicious file with its multiple Antivirus engine. Upload your file to
VirusTotal, the site then scans it using more than 30 antivirus program.
http://www.virustotal.com/
Read More...
After installing a new antivirus software on your computer, you may wonder how effective is your antivirus program at detecting virus? Here's a test file to test your antivirus program.
1. Copy the following code and paste it into your notepad.
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
2. Then save the file as eicar.com
If your anti-virus software prevents you from saving the file as eicar.com, which is a sign that it is working effectively.
If it doesn't raise an alert, try scanning the folder where you saved eicar.com.
If it does not show any alert then you should consider changing immediately to a more reliable one.
Explanation:
This test file has been provided to EICAR for distribution as the "EICAR Standard Anti-Virus Test File", and it satisfies all the criteria listed above. It is safe to pass around, because it is not a virus, and does not include any fragments of viral code. Most products react to it as if it were a virus (though they typically report it with an obvious name, such as "EICAR-AV-Test")
The file is a legitimate DOS program, and produces sensible results when run (it prints the message "EICAR-STANDARD-ANTIVIRUS-TEST-FILE!").
You are encouraged to make use of the EICAR test file. If you are aware of people who are looking for real viruses "for test purposes", bring the test file to their attention.
For more information, Please visit http://www.eicar.org/anti_virus_test_file.htm
Read More...
One of my friend's computer has been infected by this annoying trojan. It's not so difficult to remove it. So, i post this removal instruction for someone in need.
Here is the instruction of how to remove autoregistry.exe trojan
1. kill the autoregistry.exe process
a. Open the Task Manager by pressing Ctrl + Alt + Del
b. On the Processes tab, kill the autoregistry.exe process.
2. Show the hidden files
a. Open My Computer, go to Tools->Folder Options.
b. Go to View tab, check the "Show hidden files and folders" and uncheck the "Hide protected operating system files".
3. Delete the files
a. Open My Computer.
b. Click on the Folders button on the top and a folders panel will show in your left side. (important: do not click the drive directly,because it will activate the virus again)
c. Click on each drive from left side panel and find the autorun.inf and autoregistry.exe file.
d. If exist, delete it by pressing shift + Del.
e. Go to Windows folder and delete autoregistry.exe
4. Delete registry keya. Go to start -> run, type regedit and click ok.
b. On Registry Editor, go to Edit > Find and type “
autoregistry.exe”.
c. Delete all entries it found.
Read More...
