各位专家,有能帮我把WINSYS这个病毒去掉吗?非常谢谢!
急!!!!
在C:\WINDOWS的根目录下总是出现:winsys可执行文件和安装文件,
安装文件的内容是:
;-------------------------------------------------------------------------
; NDISPROT.INF -- Network Monitor Protocol Driver
;
; Copyright (c) 2003, Microsoft Corporation
;-------------------------------------------------------------------------
[version]
Signature = "$Windows NT$"
Class = NetTrans
ClassGUID = {4d36e975-e325-11ce-bfc1-08002be10318}
Provider = %Msft%
LayoutFile = layout.inf
DriverVer = 10/01/2002,6.0.4063.0
[Manufacturer]
%Msft%=MSFT,NTx86,NTia64,NTamd64
; For Win2k
[MSFT]
%NDISPROT_Desc%=Install, MS_NDISPROT
; For XP and later
[MSFT.NTx86]
%NDISPROT_Desc%=Install, MS_NDISPROT
[MSFT.NTia64]
%NDISPROT_Desc%=Install, MS_NDISPROT
[MSFT.NTamd64]
%NDISPROT_Desc%=Install, MS_NDISPROT
;-------------------------------------------------------------------------
; Installation Section
;-------------------------------------------------------------------------
[Install]
AddReg=Inst_Ndi
Characteristics=0x0 ;
CopyFiles=CpyFiles_Sys
;-------------------------------------------------------------------------
; Ndi installation support
;-------------------------------------------------------------------------
[Inst_Ndi]
HKR,Ndi,Service,,"Ndisprot"
HKR,Ndi,HelpText,,%NDISPROT_HelpText%
HKR, Ndi\Interfaces, UpperRange,, noupper
HKR,"Ndi\Interfaces","LowerRange",,"ndis5,ndis4,ndis5_prot"
;-------------------------------------------------------------------------
; Service installation support
;-------------------------------------------------------------------------
[Install.Services]
AddService=Ndisprot,,NDISPROT_Service_Inst
[NDISPROT_Service_Inst]
DisplayName = %NDISPROT_Desc%
ServiceType = 1 ;SERVICE_KERNEL_DRIVER
StartType = 3 ;SERVICE_MANUAL_START
ErrorControl = 1 ;SERVICE_ERROR_NORMAL
ServiceBinary = %12%\winsys.sys
LoadOrderGroup = NDIS
Description = %NDISPROT_Desc%
[Install.Remove.Services]
DelService=Ndisprot,0x200
;-------------------------------------------------------------------------
; Declare Destination Directories for file copy/deletion
;-------------------------------------------------------------------------
[DestinationDirs]
CpyFiles_Sys = 12 ; DIRID_DRIVERS
;-------------------------------------------------------------------------
; Files to Copy/Delete - Referenced by Install and Remove sections above
;-------------------------------------------------------------------------
[CpyFiles_Sys]
winsys.sys,,,2
[Strings]
Msft = "Microsoft"
NDISPROT_Desc = Network Monitor Protocol Driver"
NDISPROT_HelpText = "Netmon 数据包捕获驱动程序允许 Netmon 用户界面获取来自外部网络的数据包。"
请各位帮助解决!!!
[用户系统信息]Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
