Today, today's call is called his computer, the scene is on the spot, keep opening the webpage, and send an email to yourself. It was initially judged that the virus was caused, and the anti-Trojan experts were investigated, and many viruses were found, and they were caused by viruses.
1 The default path, if there are multiple users to exchange the Adminisrator to the TEMP, Temporary Internet files under the folder, the former is the junk file generated in the system, and the latter is the web garbage left by the Internet. Delete the files, applications, and more in the system disk.
2. Close all applications other than anti-virus software, start anti-virus, it is best not to operate the disk during the anti-virus, I am afraid that some viral replication functions are particularly strong.
3, restart after killing, then view the startup process, see if there is still a weird process name. If there is a virus that is not processed, by finding the path, but there is only one EXE file, or other, there is no specific path, through the process viewer, find path, manual deletion, you need to end first Process, then find the path manually delete. Remove the options in the boot load, basically complete the killing of the virus.
Today, I found a Trojan, the name of the Trojan name was not very clear, and I actually dressed myself into a service. I found it to dress myself as a systematic service. Even the name is with the system file. Almost, called * Windowsupdate, I first thought it was a Windows update, but wrong, the update file is the end of the UI, carefully checking that the virus will be dressed as a service, high, really high.