原帖由 A.Chan 於 2008-11-2 16:13 發表
小弟是Vista版本
但是中了一隻叫"owner"的病毒
怎樣才能清除?
已經裝了卡巴7.0 execute this command:( before deleting this file , pls read below)
cd c:\windows\system32
Attrib.exe owner.exe –h –r –s
Now u can see that file in system32 folder
Just type this command to del: del owner.exe
There are two more entries in c:\windows\prefatch folder
Delete these entries:
Entries will be like this Owner.exe-<HEX mem value > .pf [delete this first]
Due to this only Owner.exe is started again…
While windows startup, it will read files in that folder ( prefatch ),
it make use of new windows performance increasing technology to restart the Trojan
Delete the startup file in msconifg
And
In run type this
reg delete HKLM\Software\Microsoft\Window s\CurrentVersion\Run\Microsoft
or run > regedit
Search owner.exe, delete all entries. |