公仔箱論壇 - Powered by Discuz! Board

標題: [討論交流] 請問有哪位大大可幫幫手? [打印本頁]

作者: A.Chan 時間: 2008-11-2 04:13 PM 標題: 請問有哪位大大可幫幫手?

小弟是Vista版本
但是中了一隻叫"owner"的病毒
怎樣才能清除?

已經裝了卡巴7.0

作者: wayne7 時間: 2008-11-2 04:51 PM

原帖由 A.Chan 於 2008-11-2 16:13 發表
小弟是Vista版本
但是中了一隻叫"owner"的病毒
怎樣才能清除?

已經裝了卡巴7.0

execute this command:( before deleting this file , pls read below)

cd c:\windows\system32
Attrib.exe owner.exe –h –r –s

Now u can see that file in system32 folder

Just type this command to del: del owner.exe

There are two more entries in c:\windows\prefatch folder

Delete these entries:

Entries will be like this Owner.exe-<HEX mem value > .pf [delete this first]

Due to this only Owner.exe is started again…

While windows startup, it will read files in that folder ( prefatch ),
it make use of new windows performance increasing technology to restart the Trojan

Delete the startup file in msconifg

And
In run type this

reg delete HKLM\Software\Microsoft\Window s\CurrentVersion\Run\Microsoft

or run > regedit

Search owner.exe, delete all entries.

作者: A.Chan 時間: 2008-11-2 06:48 PM

原帖由 wayne7 於 2008-11-2 04:51 PM 發表

execute this command:( before deleting this file , pls read below)

cd c:\windows\system32
Attrib.exe owner.exe –h –r –s

Now u can see that file in system32 folder

Just type this command to de ...

介唔介意用中文打一次流程....
小弟的英文比較爛

歡迎光臨公仔箱論壇 (http://5.39.217.76/)