The emergence in Russia of a new type of payment for services - SMS billing, has led to the emergence of the so-called SMS virus that blocks the computer desktop with a banner that does not allow working on the computer.
It is necessary
- - free service of Kaspersky Lab;
- - free Dr. Web service;
- - Kaspersky Virus Removal Tool;
- - CureIt;
- - AVZ;
- - Live CD installation disc.
Instructions
Step 1
Open the page http; // support.kaspersky.com/viruses/deblocker or hhtp: //www.drweb.com/unlocker to determine the SMS virus activation code.
Step 2
Provide the text on the banner and describe the appearance of the banner to determine and obtain the required unlock codes.
Step 3
Enter the received codes to unlock your computer.
Step 4
Boot the system in safe mode if the codes are unable to cope with the virus.
Step 5
Run the anti-virus utility Kaspersky Virus Removal Tool or CureIt.
Step 6
Click the Start button to bring up the main system menu and go to Run to launch the command line tool, or use the Win + R keyboard shortcut if you do not have access to the Start menu.
Step 7
Enter regedit in the Open field and click OK to confirm the command.
Step 8
Expand the HKEY_LOCAL_MACHINE / Software / Microsoft / WindowsNT / CurrentVersion / Windows branch and delete the value of the AppInit_DLLs parameter.
Step 9
Expand HKEY_LOCAL_MACHINE / Software / Microsoft / WindowsNT / CurrentVersion / Winlogon and select the Userinit option.
Step 10
Change the value of the selected option to C: / Windows / system32 / userinit.exe.
Step 11
Expand the HKEY_LOCAL_MACHINE / Software / Microsoft / WindowsNT / CurrentVersion / Winlogon / Shell branch and make sure that the parameter values include explorer.exe.
Step 12
Use the AVZ utility to unlock the registry using the System Restore menu if you cannot open the Registry Editor tool.
The alternative method for deleting the SMS virus file seems overly simple, but it is very effective.
Step 13
Use the Start menu to open any Microsoft Word document (or create one on your desktop).
Step 14
Make any changes to the selected document (for example, change the letter).
Step 15
Click the Restart button on the Start menu without closing the selected document. This action will close all programs, including the SMS virus.
Step 16
Click the Cancel button in the Microsoft Word dialog box prompting you to save the document to cancel the reboot.
Step 17
Delete the SMS virus file and reboot the system.
