In simple way, this Trojan (Trojan.BAT.shutdown.bi) attack the system by disabling USB drive. So, usually when user attach their thumb drive, he/she unable to open the drive like it is not detected by the PC. This is one of the solution:
- Start PC in Safe Mode
- Control Panel > Folder Options > View
- Show hidden files and folders
- Don't tick:
- Hide extensions for known files
- Hide protected operating system files (Recommended)
- OK
- Go to C:\Windows
- Find file photos.zip.exe
- Rename this file to photos.zip
- Rename again photo.zip to photos.doc
- Plug in any USB drive, double click into them and find file photos.zip and autorun.inf
- Delete both of this file (if exist)
- Restart your PC in normal mode
- Go to C:\Windows
- Delete photos.doc and pc-off.bat
No comments:
Post a Comment