Saturday, April 18, 2009

Flashy virus!!! How to remove it?

Oh no!!! My PC has been infected with virus. The warning appeared after I start my PC.



The virus came from my thumbdrive and the folder FLASHY and RECYCLER appear. I've click the folder and the virus attacked my system. So, if the folder FLASHY and RECYCLER appear on your thumbdrive, DON'T YOU EVER TRY TO CLICK IT!!!!



After that, I've search to the internet the solution for it. Other user also got infected from this virus and he is suffered from it.

There is a virus called "flashy.exe" spreading in my company . We can delete it with AVG and bitdefender. But for the most computers , we installed norton for centralized virus updates. Norton can't get rid of it and all are infected. That virus is always quick spreading from memory stick. On the infected memory stick, all real folders are hidden. It make all read folder to .exe with their respective folder names and all icons are like normal folder and there is another folder named flashy.exe which is the main virus.

Whenever we unconsciously doubleclick the memory stick, it starts loading flashy.exe from the root folder of memory stick(flash drive)and then it is in the running process on the task manager and got into the computer. Destructions on flash drive is all.

Since it got into the computer, the first thing it does is removing folder option from Tool menu. If it becomes worse, it remove or change bultin administrator password.If much worse, it disable run/regedit and taskmanager. I am sure it has some strains. Sometimes i found with the name flashybot.exe is running in the process. Sometimes flashy.exe.

I still can't get the main source of that virus.
It also wrote in registry. I saw many points for flashy.exe in registry.
but it is not over on the infected machine.
if we restarted PC, it shows again in the registry and Process tab of taskmanager.

what i mean is to remove flashy virus on memory stick is easy.
but to remove flashy permanently from a computer is really out of question now.
because of hidden folder options , lost admin pwd, no task manager, and no regedit.

I really want to get rid of that flashy virus.

I searched all norton, bitdefender, and avg websites. They still don't offer it. How can i get my solution?? how can my PC recover from that bleeping flashy virus? any body help me? It is out of question for me to install bitdefender on all over 100 pcs and update definitions daily alone.


help me with removal tool!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

thanks

still nobody can help me!!!!!!!!!!!!!!!!!!!!!!!!!!!!


Source: http://www.bleepingcomputer.com/forums/lofiversion/index.php/t85498.html



Technical Names For Flashy.exe Given By Security Companies:-

BackDoor-DIY [McAfee]
W32/Glupzy-B [Sophos]
WORM_FLASHY.B [Trend Micro]
Trojan.Win32.Disabler.i [Kaspersky Lab]
Email-Worm.Win32.Brontok.N [Ikarus]
Win32.Virut.Gen.5 [PC Tools]
Backdoor:Win32/Glupzy.A [Microsoft]
Trojan.Win32.Disabler.al [Kaspersky Lab]
W32/Vetor-A [Sophos]
W32/Virut.gen [McAfee]
Trojan.Disabler.E [PC Tools]
Virus.Win32.Virut.n [Kaspersky Lab]
Virus:Win32/Virut.AE [Microsoft]
Win32.Dzan.A [PC Tools]
Mal/HckPk-C [Sophos]
Mal/Packer [Sophos]
PE_VIRUT.XL [Trend Micro]
PE_VIRUT.XP [Trend Micro]
PE_VIRUT.XS [Trend Micro]
TROJ_DISABLER.AD [Trend Micro]
Trojan.Disabler!sd5 [PC Tools]
Trojan.Disabler.O [PC Tools]
Trojan.Disabler.T [PC Tools]
Trojan.Win32.Agent.kkh [Kaspersky Lab]
Trojan.Win32.Disabler.i [Ikarus]
Trojan.Win32.Disabler.x [Kaspersky Lab]
Trojan:Win32/Patched.AF [Microsoft]
Virus.Win32.Virut.q [Kaspersky Lab]
Virus:Win32/Virut.AF [Microsoft]
Virus:Win32/Virut.K [Microsoft]
W32/Glupzy-C [Sophos]


I've found the solution for this problem. Just download the following flashy.exe remover and run it. You can download it here:http://www.technize.com/?dl_id=85.It is recommended that you run this tool in safe mode.


Source: http://www.technize.com/2009/01/18/how-to-remove-flashyexe-virus/comment-page-1/#comment-18707

2 comments:

Nasim said...

use Eset Smart Security ... the best antivirus ever

lutfiraffi said...

o.k.. thanks for your info

Post a Comment