那个 45ebntos.dll 文件是诡异程序时刻监视的文件,删除以后又会以另外的名称立即生成。
可以放入回收站,但此时却无法清空回收站。
里面有这么一段代码:
{
Watch.NewsWatch.1 = s 'NewsWatch Class'
{
CLSID = s '{6BD97C5B-7A34-4AE9-8B0D-4E03F37A8DBF}'
}
Watch.NewsWatch = s 'NewsWatch Class'
{
CLSID = s '{6BD97C5B-7A34-4AE9-8B0D-4E03F37A8DBF}'
CurVer = s 'Watch.NewsWatch.1'
}
NoRemove CLSID
{
ForceRemove {6BD97C5B-7A34-4AE9-8B0D-4E03F37A8DBF} = s 'NewsWatch Class'
{
ProgID = s 'Watch.NewsWatch.1'
VersionIndependentProgID = s 'Watch.NewsWatch'
ForceRemove 'Programmable'
InprocServer32 = s '%MODULE%'
{
val ThreadingModel = s 'Apartment'
}
'TypeLib' = s '{3221A442-E009-47F6-97C8-835462ACC6B2}'
}
}
}
HKLM
{
NoRemove SOFTWARE
{
NoRemove Microsoft
{
NoRemove Windows
{
NoRemove CurrentVersion
{
NoRemove Explorer
{
NoRemove 'Browser Helper
Objects'
{
{6BD97C5B-7A34-4AE9-8B0D-4E03F37A8DBF}
}
}
}
}
}
}
}