由买买提看人间百态

boards

本页内容为未名空间相应帖子的节选和存档,一周内的贴子最多显示50字,超过一周显示500字 访问原贴
CS版 - 借宝地一问:Can not remove an entry in Regedit.
相关主题
求助请教:格式化硬盘冲撞系统也不能干掉的trojan--崩溃了 (转载)
Can some one help me on this!!!!!!!!!!!!!!!!借宝地问个面试中的sql的问题。
写paper引用wiki的东西可以吗?about virtual memory
问一个关于access control里write up的问题我也来问个专业方向的问题
Help, install C++ compilerVirus vs. Network Security Re: 我也来问个
借宝地一问:开机后出现WINDOWS XP几个大字然后黑屏怎么办About virus!
向微软“总部”:求助,REBOOT INSTEAD OF SHUTDOWN (转载)计算机可能中毒了, 求助
电脑中毒了请各位行家看看怎么回事 (转载)
相关话题的讨论汇总
话题: entry话题: regedit话题: remove话题: virus话题: 借宝地
进入CS版参与讨论
1 (共1页)
n****q
发帖数: 464
1
I have the following entry:
\HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\windows\currentversion\run
buwevirefa rundll32.exe C:\windows\system32\vehotora.all
This is one of Trojan virus.
I had deleted C:\windows\system32\vehotora.all;
reboot in safe mode;
run regedit to delete all vehotora.all related entries;
But reboot in normal mode, this entry shows up again.
How to completely delete this entry? Thanks very much!!
g*****g
发帖数: 34805
2
Usually certain driver is involved in this case, some .sys file,
you should google to see if you can find it.

【在 n****q 的大作中提到】
: I have the following entry:
: \HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\windows\currentversion\run
: buwevirefa rundll32.exe C:\windows\system32\vehotora.all
: This is one of Trojan virus.
: I had deleted C:\windows\system32\vehotora.all;
: reboot in safe mode;
: run regedit to delete all vehotora.all related entries;
: But reboot in normal mode, this entry shows up again.
: How to completely delete this entry? Thanks very much!!

n****q
发帖数: 464
3
already googled in last 2 days and 2 nights. No solution, other than anti-
virus ads. :-(

【在 g*****g 的大作中提到】
: Usually certain driver is involved in this case, some .sys file,
: you should google to see if you can find it.

g*****g
发帖数: 34805
4
You probably have another virus running at the same time, if you don't
remove that one, you can't remove this one.

【在 n****q 的大作中提到】
: I have the following entry:
: \HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\windows\currentversion\run
: buwevirefa rundll32.exe C:\windows\system32\vehotora.all
: This is one of Trojan virus.
: I had deleted C:\windows\system32\vehotora.all;
: reboot in safe mode;
: run regedit to delete all vehotora.all related entries;
: But reboot in normal mode, this entry shows up again.
: How to completely delete this entry? Thanks very much!!

n****q
发帖数: 464
5
agree, you may be right.
Before this, I already successfully removed other two entries and their
related files. My norton 2009 anti-virus just could not detect any of those
virus.
This seems last one left but there may be extra hidden that I do not know
about.
Thanks,

【在 g*****g 的大作中提到】
: You probably have another virus running at the same time, if you don't
: remove that one, you can't remove this one.

1 (共1页)
进入CS版参与讨论
相关主题
请各位行家看看怎么回事 (转载)Help, install C++ compiler
matlab一问借宝地一问:开机后出现WINDOWS XP几个大字然后黑屏怎么办
probit regression一问 (转载)向微软“总部”:求助,REBOOT INSTEAD OF SHUTDOWN (转载)
借人气一问:本版有无RSS订阅功能?电脑中毒了
求助请教:格式化硬盘冲撞系统也不能干掉的trojan--崩溃了 (转载)
Can some one help me on this!!!!!!!!!!!!!!!!借宝地问个面试中的sql的问题。
写paper引用wiki的东西可以吗?about virtual memory
问一个关于access control里write up的问题我也来问个专业方向的问题
相关话题的讨论汇总
话题: entry话题: regedit话题: remove话题: virus话题: 借宝地