多謝lanyu!病毒找到了,還有問題請教

來源: oldclock 2012-03-11 17:11:42 [] [舊帖] [給我悄悄話] 本文已被閱讀: 次 (1456 bytes)
回答: step by steplanyu2012-03-11 10:44:49
在Documents and Settings%[UserName]Local SettingsApplication Data[random].exe裏叫一個j打頭的文件隱藏著,已經消除了。
還想請教一下(3) Remove the related registry entries of Security Shield 2012:
下麵有些找不到,此外
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = 0x00000000結尾不是= 1,需要消掉嗎? 下麵的幾條沒有找到,一定要找到去處嗎?
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerPhishingFilter "Enabled" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = .exe HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random].exe"
現在再找Malwarebyte,準備再查查毒。再次感謝!

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = 1 HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerPhishingFilter "Enabled" = 0 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyOverride" = " " HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyServer" =127.0.0.1: HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyEnable" = 1 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = .exe HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random].exe"

(4) Scan your computer by "Malwarebyte"
請您先登陸,再發跟帖!

發現Adblock插件

如要繼續瀏覽
請支持本站 請務必在本站關閉/移除任何Adblock

關閉Adblock後 請點擊

請參考如何關閉Adblock/Adblock plus

安裝Adblock plus用戶請點擊瀏覽器圖標
選擇“Disable on www.wenxuecity.com”

安裝Adblock用戶請點擊圖標
選擇“don't run on pages on this domain”