12   2  /  2  页   跳转

求救!!!Trojan.Win32.Mnless.lxa

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{0DC4BBEC-A3F5-808F-0203-060704010103}]
<N/A><C:\WINDOWS\system32\rising.exe> []


看到这个冒充瑞星的假货。

还有这个下面不正常的注册表值项:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><userinit.exe,> [(Verified)Microsoft Windows Publisher]
gototop
 

删除注册表项目
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{0DC4BBEC-A3F5-808F-0203-060704010103}]
<N/A><C:\WINDOWS\system32\rising.exe>

重启删除
C:\WINDOWS\system32\rising.exe
gototop
 

病毒路径: Explorer.EXE>>C:\WINDOWS\Explorer.EXE
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT