Are you infected by the Harry Potter virus?
If you are then read on to discover how you can manually remove it.
1. Make a master file in My Documents database.mdb
2. Create a file autorun.inf in every drive, flash disk, and folders
3. Making file Thumb.db (hati2 without the letter s) in each folder
4. Making file Microsoft.lnk and New Harry Potter and …. Lnk in each folder
5. Making copies of each folder with the extension. Lnk
6. In task manager there are services wscript.exe
Tips for eradication of the Harry Potter virus -
1. Turn off System Restore .. (kilk right on my computer)
2. Turn off the virus wsrcipt.exe (C: \ WINDOWS \ System32 \ wscript.exe)
Can use Process Explorer or misc. tool in HijackThis ..
3. Delete virus files in the My Documents database.mdb ..
4. Remove duplicate files virus ..
Use the search facility in Windows ..
In the “More advanced options”, make sure the option “Search system folders” and “Search hidden files and folders “selected both ..
Search a file named autorun.inf size 8 KB
Search files with the name Thumb.db size 8 KB
Search files with the extensions. Lnk.lnk size 1 KB
Delete all files found ..
5. Remove Autorun registry created by using HijackThis virus ..Look at the HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Run: associated with the file database.mdb
I hope that helps!