Visit this page for a software -- Process Explorer -- that analyses processes: http://www.sysinternals.com/Utilities/ProcessExplorer.html
It is zipped and can run once you unzip it. It will show you a full list of current proesses with about enough info for you to locate this malware. Most of the processes will be from Microsoft and you can filter them out and look for the non-MS ones. One or two of them will belong to this my180. You can make it sure by searching process names on google -- huh, this software now has "google" on its context menu. Commonly used software will have their info available on google search.
Once you have found the my180 process (there can be more than 1), do NOt kill it yet -- use the "properties" option from this Process Explorer to find out where it sits on your hard-disk and delete from there. There may be some other files in the sub-folder it is found and you better delete them too, UNLESS it a system folder. To be safe, you can zip them then delete.
You can clean your registry once and you are sure there is no symptom any more after a reboot.
So you will need to take these steps -->
所有跟帖:
• also, read this document: -ppzcgg- ♀ (36 bytes) () 03/27/2006 postreply 07:07:39