Tuesday, January 5, 2010

hi5update.exe, a new virus on HI5.

A new virus that attacks HI5 has been seen for the first time a few days ago. Users reported that it requests them to download "hi5update.exe" which will steal their password after installation. It has also been reported that the virus can be found on a few Romanian websites. The main idea is that you should NOT download an executable file which is named "hi5update.exe". I found informations about this virus from Romanian bloggers, who already submitted it to anti-virus companies in order to help them to offer users protection as soon as possible.

If you're already infected, try to do the following:

1)delete from C:\Windows\system32:
  • winlog.exe
  • boot.exe
2)delete from registry the following keys:
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run \Font
3) Get Kaspersky Virus Removal Tool 2010 from Softpedia, and run it: http://www.softpedia.com/get/Antivirus/Kaspersky-Virus-Removal-Tool.shtml .

More informations can be found here: http://devirusare.com/2010/01/03/hi5update-exe-devirusare/ (for Romanian users, others can use Google Translate).

No comments:

Post a Comment