Malicious web page clearance process
I don't know from that day, the firewall is always closed. The default home page of IE is always modified, and I will not want to see the URL, it is very disgustable! For this problem, I tried to modify the IE property, optimize the master, modify the registry, the latest version of Rising anti-virus, the problem can still not solve, find a lot of information, did not make a source.
There is no quiet thinking, and I found that the startup item when boot startup has a Taskmgr.exe file. The directory is [System Drive]: / Windows / System / Taskmgr.exe, but I can't find this in this directory. file. Open the resource manager and discover two Taskmgr.exe (one is the resource manager, this must be noted), know that it is
Remove this file from the startup item in the registry, I want to know all things. In most of the time, it is safe, but even this file is coming out, IE default homepage is also turned to that home page, there is no way to modify the registry repeatedly. But if there is a sudden feeling, is it other reasons? This begins to pay attention, after a period of discovery: As long as one opens notepad, this guy comes out, go to the registry ".txt" to find: in the hkey_current_user / suftware / microsoft / windows nt / currentversion / extensions key INI, TXT, WTX are all opened with NOTEPAD.EXE file, is it my computer that has such a different named virus? I am very happy after finding the reason. I feel that I will be deleted with these two files. I will go to the [System Drive]: / Windows / System / Folder, and the results found that there is no file at all! Open the hidden file, then look, still? It is clear that the file under this folder is going? Think of the XP security mode, because most of the programs should be seen inside, but there is still no discovery of this program.
After a while, I feel that the article is still in the folder option is the fundamental of solving the problem, opens the folder option again, after the test, problem solving.
On the folder selection, you can see "Show all files and folders" in the folder selection, "in XP may not see these two hateless files, some articles say to 98 or safe mode Under First apply it. Don't see these two files under [System Drive]: / Windows / System! And they all have a RM icon, but this maker has left us a method indicating that these two files are different from other files, so that it is easy to delete errors, you only need to take the two RM icons. The file is deleted; Of course, let's take a closer look at the property will know that the two files are not established with our system files, which is the foundation of the system files.
Everyone should check if you have the same name virus file under the Windows folder, and the SYSTEM and SYSTEM32 folders under Windows are also checked. The viruses add their own copy to the above three folders, if clearing is not clean May be azagrated. Because we see very clear from the registration table, just leave a notepad.exe (not Notepad, it is the bad guy with RM icon), he will make the virus.
