Case Study
Case 1
Got Worm:VBS/Jenxcus.K, I thought I have removed it from my computer, but my anti-virus popped up threat alert, stating Worm:VBS/Jenxcus.K. I removed it again and again, but it keeps coming back. So what can I do to get rid of Worm:VBS/Jenxcus.K completely from my computer? I swear I have tried everything I can. My computer is Windows 7 Ultimate.
Analyze: in this case, the essential files belong to Worm:VBS/Jenxcus.K hide deeply behind your system, so it is hard to detect.
Case 2
I have seen some files related to Worm:VBS/Jenxcus.K in my C drive or other places in my computer some time, but cannot find them now. By the way, my anti-virus seems to work weirdly, because it supposed to be launched automatically when I boot my computer, but I need to open it manually recently. I run a win 8, I think. Can anyone help?
Analyze: Worm:VBS/Jenxcus.K does create malicious files and registry entries to target system; however, it changes its files names and locations very often. What is more, it changes the startup items.
Further Information about Worm:VBS/Jenxcus.K
Worm:VBS/Jenxcus.K degrades computer performance significantly, for example, it slows down system running speed, it shuts down and restarts your computer randomly. Worm:VBS/Jenxcus.K aims to steal users’ private information. All your documents, photos, or credit card numbers and email passwords that stored in your PC can be transferred to cyber criminals for illegal purpose. Users have to remove Worm:VBS/Jenxcus.K as soon as possible to protect your computer and private information.
The Manual Way to Get Rid of Worm:VBS/Jenxcus.K
Step 1: Boot up the infected computer, press F8 at the very beginning, choose “Safe Mode with Networking” and press Enter to get in safe mode with networking.
Step 2: Press Ctrl+Alt+Del keys together and stop Worm:VBS/Jenxcus.K processes in the Windows Task Manager.
Step 3: Open Control Panel from Start menu and search for Folder Options. When Folder Options window opens, click on its View tab, tick Show hidden files and folders and non-tick Hide protected operating system files (Recommended) and then press OK.
Step 4: Search for all infected files and registry entries and remove them from your computer as follows:
%User Startup%\{malware file name}.vbs
%UserProfile\Desktop\Mal/EncPk-ALC.lnk
%UserProfile\StartMenu\Mal/EncPk-ALC\Mal\EncPk-ALC.lnk
%UserProfile\StartMenu\Mal/EncPk-ALC\Registration.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Mal/EncPk-ALC\UninstallString “%AppData%[RANDOM CHARACTERS][RANDOM CHARACTERS].exe” -u
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\[RANDOM CHARACTERS] %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
The Most Effective Way to Get Rid of Worm:VBS/Jenxcus.K - Automatic Removal with SpyHunter
Step one: Download Spyhunter antivirus program by clicking the icon below;
Step two: Click on Download, and then install SpyHunter on your computer by following the hints step by step.
Step three: Do a full scanning and then remove every threats caused by Worm:VBS/Jenxcus.K.
Step four: Reboot your computer and check it again to make sure that Worm:VBS/Jenxcus.K is gone completely.
Notes: The method mentioned in the first place is manual removal, which required the operator grasps general knowledge about computer. If you are not the one who is familiar with computer, in order to avoid further damage to the computer, you’d better choose automatic method with SpyHunter to remove Worm:VBS/Jenxcus.K. The reason is that using SpyHunter to eliminate Worm:VBS/Jenxcus.K is easy, effective, and preventive. Download and install SpyHunter to help you release your current worries and protect your computer permanently.
No comments:
Post a Comment