c******n
发帖数: 16403 | 1 感染上这个流氓病毒， 现在IE和firefox都上不了。 没法google找解决方案。 版上有
哪个大牛能介绍一下怎么杀么? |
y****i
发帖数: 17878 | 2 do a clean reinstall, then use VM software such as free Oracle Virtualbox
for browsing shabby sites
上有
【在 c******n 的大作中提到】
: 感染上这个流氓病毒， 现在IE和firefox都上不了。 没法google找解决方案。 版上有
: 哪个大牛能介绍一下怎么杀么?
|
c******n
发帖数: 16403 | 3 重装系统？这个工作量太大了 有没有更简单的办法？
【在 y****i 的大作中提到】
: do a clean reinstall, then use VM software such as free Oracle Virtualbox
: for browsing shabby sites
:
: 上有
|
y****i
发帖数: 17878 | 4 buy a new computer //hehe
【在 c******n 的大作中提到】
: 重装系统？这个工作量太大了 有没有更简单的办法？
|
c******n
发帖数: 16403 | 5 没钱
【在 y****i 的大作中提到】
: buy a new computer //hehe
|
y****i
发帖数: 17878 | 6 earn more
【在 c******n 的大作中提到】
: 没钱
|
c******n
发帖数: 16403 | 7 兄台援助一下
【在 y****i 的大作中提到】
: earn more
|
y****i
发帖数: 17878 | 8 the keyword being "earn"
【在 c******n 的大作中提到】
: 兄台援助一下
|
U*******t
发帖数: 30 | 9 Got affected several days ago, here is what I followed: http://www.2-viruses.com/remove-total-xp-security
1. Use task manager to stop av.exe; Notice you may see names other than av.
exe. Mine was something like ts.exe
2. Use Regedit (win-R, then type regedit) to edit the registry to remove the
following entries (ignore those if they do not appear in your registry):
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” =
“av.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)”
= “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START
“%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /
START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open
\command “(Default)” = “av.exe” /START “firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\
safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-
mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\
open\command “(Default)” = “av.exe” /START “iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride”
= “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” =
“1?
3. Delete the executable (same one as you find in step 1). The best way is
to use Search to locate the executable, then delete it.
%Documents and Settings%\[UserName]\Application Data\av.exe
%Documents and Settings%\[UserName]\Application Data\WRblt8464P
Good luck! |
c******n
发帖数: 16403 | 10 给个earn的idea， proposal也行啊
【在 y****i 的大作中提到】
: the keyword being "earn"
|
c******n
发帖数: 16403 | 11 多谢， 不过我在task manager里面没有找到av.exe or ts.exe. 甚至都没有2个字母。
其它那些进程我都不认识是干嘛的， 应该杀哪个？ 或者说哪些进程我应该保留， 其
它的我都杀了。
the
”
START
【在 U*******t 的大作中提到】
: Got affected several days ago, here is what I followed: http://www.2-viruses.com/remove-total-xp-security
: 1. Use task manager to stop av.exe; Notice you may see names other than av.
: exe. Mine was something like ts.exe
: 2. Use Regedit (win-R, then type regedit) to edit the registry to remove the
: following entries (ignore those if they do not appear in your registry):
: HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” =
: “av.exe” /START “%1? %*
: HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)”
: = “av.exe” /START “%1? %*
: HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START
|
b*****t
发帖数: 3928 | 12 http://www.wiki-security.com 贴过来的。
Remove XP Security 2011 manually
Another method to remove XP Security 2011 is to manually delete XP Security
2011 files in your system. Detect and remove the following XP Security 2011
files:
Processes
%Temp%\pw.exe
Other Files
%UserProfile%\Start Menu\Programs\XP Security 2011
Registry Keys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "XP Security
2011" |
U*******t
发帖数: 30 | 13 if you do not know which process to kill, kill all which belong to %user%
(your login name), and hope it works :-)
其
【在 c******n 的大作中提到】
: 多谢， 不过我在task manager里面没有找到av.exe or ts.exe. 甚至都没有2个字母。
: 其它那些进程我都不认识是干嘛的， 应该杀哪个？ 或者说哪些进程我应该保留， 其
: 它的我都杀了。
:
: the
: ”
: START
|
U*******t
发帖数: 30 | 14 Got affected several days ago, here is what I followed: http://www.2-viruses.com/remove-total-xp-security
1. Use task manager to stop av.exe; Notice you may see names other than av.
exe. Mine was something like ts.exe
2. Use Regedit (win-R, then type regedit) to edit the registry to remove the
following entries (ignore those if they do not appear in your registry):
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” =
“av.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)”
= “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START
“%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /
START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open
\command “(Default)” = “av.exe” /START “firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\
safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-
mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\
open\command “(Default)” = “av.exe” /START “iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride”
= “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” =
“1?
3. Delete the executable (same one as you find in step 1). The best way is
to use Search to locate the executable, then delete it.
%Documents and Settings%\[UserName]\Application Data\av.exe
%Documents and Settings%\[UserName]\Application Data\WRblt8464P
Good luck! |
