回复: 杀掉worm.win32.hipak.b病毒后,U盘文件夹后面强制加.exe的后缀,无法正常显示(附...
用SRENG删除注册表中
<yxlvipnt><D:\WINDOWS\xvptmtah.exe> [N/A]
删除启动文件夹
[Microsoft Office]
<D:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> D:\PROGRA~1\MICROS~2\Office10\OSA.EXE [Microsoft Corporation]><N>
删除驱动程序
[162375 / 162375][Stopped/Manual Start]
<\??\D:\WINDOWS\system32\Drivers\162375.sys><N/A>
[ntptdb / ntptdb][Stopped/Auto Start]
<\??\D:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys><N/A>
这两个设置为禁止
[fpocm / fpocmd][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\fpocmd.sys><N/A>
[j5wimnye / j5wimnye][Stopped/Auto Start]
<\??\D:\WINDOWS\system32\drivers\j5wimnye.sys><N/A>
删除浏览器加载
[HTML Helper]
{986488AF-13D5-9DDF-4FEF-9FB88698CFC1} <D:\Documents and Settings\All Users\Application Data\Microsoft\Office\USERDATA\HMaJfesJSt.dll, N/A>
重起以后用windows清理助手清理一下系统。
windows清理助手下载页面：
http://www.arswp.com/download.html再全盘杀毒`~
