多謝lanyu！病毒找到了，還有問題請教

來源: oldclock 於 2012-03-11 17:11:42 [] [舊帖] [給我悄悄話] 閱讀數 : (1456 bytes)
回答: step by step 由 lanyu 於 2012-03-11 10:44:49 
在Documents and Settings%[UserName]Local SettingsApplication Data[random].exe裏叫一個j打頭的文件隱藏著，已經消除了。
還想請教一下(3) Remove the related registry entries of Security Shield 2012:
下麵有些找不到，此外
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = 0x00000000結尾不是= 1，需要消掉嗎？

下麵的幾條沒有找到，一定要找到去處嗎？
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerPhishingFilter "Enabled" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = .exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random].exe"

現在再找Malwarebyte，準備再查查毒。再次感謝！

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = 1
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerPhishingFilter "Enabled" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyOverride" = " "
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyServer" =127.0.0.1:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyEnable" = 1
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = .exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random].exe"

(4) Scan your computer by "Malwarebyte"
請您先登陸，再發跟帖！