I removed this from my daughter's Vista laptop last night. It's very pernicious. It wouldn't allow opening windows defender or going onto the internet to get anti-malware downloads. Avira did not recognize it. I did the following:
Shut down and restart in safe mode (tap F8 repeatedly during startup to get black and white safe mode screen). Click repair system and then open system restore. Choose a restore point prior to the infection. I picked one from 2 days ago. This stopped the pop ups. Then I got onto the web and downloaded anti-malware (the free version) from malwarebytes.org. The full scan took an hour and found 2 infections - a trojan and spyware. Her computer is now fine.
A possibly easier approach you could try would be to open task manager and look for the program and stop it and then run or get anti-malware. If the virus wont let you open taskmanager, you can find it in C:programs, rename it and then open it.
Shut down and restart in safe mode (tap F8 repeatedly during startup to get black and white safe mode screen). Click repair system and then open system restore. Choose a restore point prior to the infection. I picked one from 2 days ago. This stopped the pop ups. Then I got onto the web and downloaded anti-malware (the free version) from malwarebytes.org. The full scan took an hour and found 2 infections - a trojan and spyware. Her computer is now fine.
A possibly easier approach you could try would be to open task manager and look for the program and stop it and then run or get anti-malware. If the virus wont let you open taskmanager, you can find it in C:programs, rename it and then open it.
選擇“Disable on www.wenxuecity.com”
選擇“don't run on pages on this domain”
