Try this

來源: tianfangye 於 2013-08-31 16:42:03 [] [博客] [舊帖] [給我悄悄話] 閱讀數 : (587 bytes)
回答: 花了4小時也沒能殺掉svchost.exe,求建議 由 sweetptt 於 2013-08-31 10:18:11

There are two rootkits that is root cause of c:\windows\svchost.exe

zero access & TDL4/MAXSS (mostly pihar )

As you say that you have winrscmde pop up,it should be rootkit boot.pihar.TDSSkiller should cure it

http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Restart the PC,If MBAM still detects svchost.exe,remove it and re scan,it should come clean.

Do not mess up C:\windows\system32\svchost.exe,this is valid file

good luck

請您先登陸，再發跟帖！