W32/Autorun.jamesgo is a worm that can spreads via removable media storage and execute itself via autorun.inf file.
Risk Level: Low
File Size: Varies
Affected System: Windows
Common Symptoms:
1. Automatically opens MS Word
2. Displays Open(jamesgo.dll) when checking Drive C: properties
To remove:
1.) Hit CTR+ALT+DEL. Right-click mo yung wscript.exe na nagrurun and click END TASK.
2.) Open My Computer. Click TOOLS, then FOLDER OPTIONS. Under the VIEW tab, tick "show hidden files and folders" and uncheck "Hide protected operating system files".
3.) Go to C:\Windows\System32 and delete all these files if found:
- autorun.inf
- autorun.ico
- test.reg
- test.bat
- test.vbs
4.) Go to C:\ and delete those files again if they exist on your root. Check other partitions as well.
5.) Click START, then RUN, and type REGEDIT. Highlight My Computer there and then click on the EDIT tab click FIND. Search each one of the files I have mentioned on #3 and press F3 to search further. Delete every file that you find that contain these.
6.) Reboot. Your PC should now be clean. Wag limutan ibalik ang dating settings sa folder options.
No comments:
Post a Comment