facebook virus july 26-27 2011

Tools needed:
Process Explorer
Kaspersky Virus Removal Tool 2011
Antivirus, we use free AVG antivirus
 HijackThis
Malwarebytes
Closing ports 445 and 135  - fix Generic Host for Win32 Process and svchost.exe errors.
 or update your windows security patches

Step 1

Before we begin first download Process Explorer if the browser wont allow, open task manager and kill in the process the falshplayer.exe (press Delete then ok or right click the flashplayer.exe and delete.).
and second download the above tools needed.
when all the tools are ready, install the Kaspersky Virus Removal Tool 2011 and make a quick scan, after it removes the infection reboot the computer if needed, after the reboot  click Start >>> click Run then type msconfig, go to Startup tab uncheck  flashpalyer.exe and any application with 32 example services32.exe, ccdrive32.exe,  and also application with no name.

 Step 2

Open the process explorer again and look if the flashplayer.exe, and any apps name with 32 is running , if it is press Delete then ok or right click the flashplayer.exe and delete. you can see mostly the virus stay below the windows explorer. click here

Step 3
Open windows explorer go to tools  then click folder option, In the View tab under the Hidden files and folders click Show hidden files and folders and Uncheck Hide extensions for known file types and Hide protected operating system files.

In the WINDOWS folder in C: delete the folder name update 1, update 01, update -1,update 02 and etc.. or any folder name update/s there's no such thing name updates in WINDOWS sub folder, look at the picture below.

Step 4

Install  free AVG antivirus

Step 5

Run  HijackThis
and  accept then do a system scan, find flashplayer.exe or any name of an application with 32.exe and delete. note! (NvMediaCenter and NvCplDaemon is not included this is not a virus)

Step 6
Install Malwarebytes
update and do a quick scan and remove infections, reboot if needed, if you want to be sure that no virus is still running, repeat step 2.

Step 7

Closing ports 445 and 135 - fix Generic Host for Win32 Process and svchost.exe errors.

 or update your windows security patches

if the virus is still running backup your important files and do a REFORMAT.
.