http://devbuilds.kaspersky-labs. ... 6.12.2008_11-34.exe试试卡巴的顽固清除工具(更新至2008.12.26)
应该杀出FraudTool.Win32.XPSecurityCenter.as
刚才研究了下
删除注册表的HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run xp antispyware 2009
项
删除DLL:
%program_files%\xp_antispyware\pthreadvc2.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcr80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcp80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcm80.dll
%program_files%\xp_antispyware\htmlayout.dll
%program_files%\xp_antispyware\avengn.dll
删除注册表:HKEY_CURRENT_USER\control panel\don't load scui.cpl
HKEY_CURRENT_USER\control panel\don't load wscui.cpl
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run xp antispyware 2009
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp_antispyware
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp_antispyware displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp_antispyware uninstallstring
HKEY_LOCAL_MACHINE\software\xp_antispyware
HKEY_LOCAL_MACHINE\software\xp_antispyware info
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run xp antispyware 2009
删除文件:_scui.cpl
081022_6692386
avengn.dll
azysymemur.vbs
file[1].exe
flashba.pdf
flashba1.pdf
install(2).ex17
install(2).ex18
install.ex11
install.ex12
install.ex13
install.ex15
install.ex16
install.ex19
install.ex20
install.ex21
brastk.exe
install.exe
uninstall.exe
wini10252.exe
wini10431.exe
wini10602.exe
wini10731.exe
wscui.cpl
xp_antispyware.exe
wini10451631.exe
ysywim.exe
zecevy.scr
zogojiv.exe
%desktopdirectory%\xp_antispyware.lnk
%profile%\application data\azysymemur.vbs
%profile%\application data\ewaqog.db
%profile%\application data\microsoft\internet explorer\quick launch\xp_antispyware.lnk
%profile%\application data\oxev._dl
%profile%\application data\ujef.dl
%profile%\application data\zecevy.scr
%profile%\documents\baja.dat
%profile%\documents\ogufybufub._dl
%profile%\documents\tohiwaxaw.dat
%program_files%\common files\aludi.bat
%program_files%\common files\etyxe.dl
%program_files%\common files\ikuqywa.bin
%program_files%\common files\qiqifos.pif
%program_files%\xp_antispyware\pthreadvc2.dll
%program_files%\xp_antispyware\avengn.dll
%program_files%\xp_antispyware\comp.dat
%program_files%\xp_antispyware\data\daily.cvd
%program_files%\xp_antispyware\htmlayout.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\microsoft.vc80.crt.manifest
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcm80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcp80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcr80.dll
%program_files%\xp_antispyware\uninstall.exe
%program_files%\xp_antispyware\wscui.cpl
%program_files%\xp_antispyware\xp_antispyware.cfg
%program_files%\xp_antispyware\xp_antispyware.exe
%programs%\xp_antispyware\uninstall.lnk
%programs%\xp_antispyware\xp_antispyware.lnk
%system%\_scui.cpl
%system%\agat.lib
%system%\atoqore.bin
%system%\focegyj.dat
%system%\wini10731.exe
%windows%\eruqogoxuc.dl
%windows%\odajuxomyf.dat
%windows%\olyzo.com
%windows%\ovexaz.bat
%windows%\utan.dat
%windows%\yvisycum.lib
%program_files%\xp_antispyware\pthreadvc2.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcr80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcp80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\msvcm80.dll
%program_files%\xp_antispyware\htmlayout.dll
%program_files%\xp_antispyware\avengn.dll
zogojiv.exe
wini10602.exe
ysywim.exe
wini10451631.exe
wini10431.exe
wini10252.exe
file[1].exe
install.exe
brastk.exe
%program_files%\xp_antispyware\xp_antispyware.exe
%system%\wini10731.exe
%program_files%\xp_antispyware\uninstall.exe
删除目录:%program_files%\xp_antispyware
%programs%\xp_antispyware