电脑上网就会不时地自动弹出网页:http://202.ssc94f.com/vxsg/9v.htm……,指向一个网游页面。根据SREng扫描日志,修复方案如下:
1.删除以下文件:
c:\program files\common files\mstoock\winlorer.exe
c:\program files\common files\mstoock\chavdn.exe
c:\program files\common files\mstoock\msdv\geads.dll
c:\program files\common files\mstoock\msdv\keals.dll
c:\program files\common files\mstoock\msdv\kovsl.dll
c:\program files\common files\mstoock\msdv\mssrbd.dll
c:\program files\common files\mstoock\msdv\msstgg.dll
2.使用SREng修复下面各项:
启动项目 -- 注册表之如下项删除(皆为木马残留项目,如有文件存在,则一同删除):
[imgutilhx2.dll] <>
[ksuserfy.dll] <>
[tscfgwmijxsj.dll] <>
[nwapi32dj.dll] <>
[bootvidgj.dll] <>
[kbdswjr.dll] <>
[catsrvwl.dll] <>
[slbiopfs2.dll] <>
[dispexcb.dll] <>
[cliconfgzx.dll] <>
[scrruncqsj.dll] <>
[wmpuiqhx.dll] <>
[adsntzt.dll] <>
[mstimewd.dll] <>
[zcwdrqhv.dll] <>
[kbdgrms.dll] <>
[msobjstl.dll] <>
[dpvvoxmh.dll] <>
启动项目 -- 服务 -- Win32服务应用程序,删除如下服务:
[Local Access System Interface / LASIS] <C:\Program Files\Common Files\Mstoock\Winlorer.exe>
>> 除非说明均为原创,如转载请注明来源于http://www.stormcn.cn/post/205.html