Pc and Server is infected with w32\fujacks.ini

[Ravskie]

Can you help me with this my pc is infected with w32\fujacks.ini and i believed my server is infected to. how can i removed it ?

is it true that i can removed it going to registry ?

hoping for your immediate response .......

thanks,

[SecRecy]

Temporarily Disable System Restore (Windows Me/XP).
2. Update the virus definitions.

3. Reboot computer in SafeMode

4. Run a full system scan and clean/delete all infected file

5. Delete/Modify any values added to the registry.

Navigate to and delete the following subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasautol



6. Exit registry editor.

7. Find and stop the service

a) Click Start > Run.
b) Type services.msc, and then click OK.
c) Locate and select the service that was detected.



Service name: Remote Help Session Manager
Display name: Remote Help Session Manager
Startup Type: Automatic


d) Click Action > Properties.
e) Click Stop.
f) Change Startup Type to Manual.
g) Click OK and close the Services window.
h) Restart the computer.



8. In order to make sure that threat is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.

[Norberd]

Reboot your computer in Safe Mode and attempt it from there.

when computer will be running in Normal mode, you can remove the registry entries created by the virus. Click start and choose Run… to open the Run dialog box. Enter regedit and click OK. Navigate to the following sub-key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

and delete the following value from the right-pane:

“svcshare”=”%System%\Drivers\spoclsv.exe”

The Desktop_.ini (W32.Fujacks.E) virus should be successfully removed from your computer.

[Ravskie]

thanks for the information as i've checked my workstation I did not find any of that files were looking for but anyway thanks again atleast I can checked it at my server. and also can I ask you what do you suggest, what anti virus is the best to use to stop/clean or get rid of this kind of virus ?