Ok, first off, to all of those who have stated that it is NOT a virus, you're retarded. The original was based one www.realphx.com, and it was the Trojan.sinkin virus, but, that webpage was exposed, and was shut down because of it's practices. Now, they had to re-locate and they have moved to www.buddypicture.net, and the virus name has changed. I am not aware of the new name, but it is a virus.
The easiest way to remove it is to first get a copy of an anti-virus program. Next, hit start and click run. Type in regedit and wait for the program to start. Now, BEFORE YOU DO ANYTHING IN HERE, BACK UP THE REGISTRY. If you mess this up, your computer is f'ed Now, you have two options, the hard way...
Browse to 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
Or the easy way...
Press Edit on the toolbar, and then find. Type in antivirus and hit find.
Now, when you have found the value that states ANTIVIRUS = *
(* may be a.exe b.exe or av.exe)
DELETE THAT VALUE ONLY.
Step two. Now you must restart your computer IN SAFE MODE. For Windows XP, click START > RUN and type in msconfig and hit enter. Under the BOOT.INI tab on top, you should see a value on the lower section that has a little check mark next to /SAFEBOOT. Place a check in that box, press apply, and close the config program, RESTART.
When you have restarted, it should say safemode in the four corners of the screen. Start the antivirus software, and run a full system scan. When the software finds the virus, it will delete it with no trouble. Browse to the folder, whether it is C:\ or C:\WINDOWS and make sure the file is gone. Again it may be named a.exe b.exe or av.exe. Now, go back to START > RUN and type msconfig again, and back into the BOOT.INI file and UNCHECK the /SAFEBOOT value, click apply and restart.
Now, the virus is almost gone. Next, search the internet for a file called "CWShredder" and run that program, it should scan the computer and say mostly "not present" but it will pick up a file CWS affiliate WIN and remove that, and you are finished.
NEXT TIME, DO NOT CLICK ON LINKS IN SOMEONES INFO.
So there you have it folks, it is a virus, it cannot be deleted without these steps, and if you just erase it from your info, it will put itself back. So take care, and don't be stupid.
|