电脑中毒

vivianqq

我的电脑中毒了，现在竟如安全莫shi(my computer is on safe mode now) because the virus program keep coming up say you are in danger with virus infecting the computer, but the virus program wants to install itself on the the computer saying it will protect you from virus.  But it tries to uninstall my virus checker and says I must pay to remove the virus.  The virus calls it self system protector.

3rdman

go borrow a WinPE cd then boot into WinPE and copy all the datas u want to keep in c drive into other partition.
format ur c drive reinstall windows, and first thing first install antivir classic (free antivirus from http://www.free-av.com/) update it then do a full pc scan.

that's best option i'll do in ur situation, since it seems the core is already corrupted and rather than trying to fix the os i'll suggest that u do the steps above and keep up ur virus protection this time.

lijin40000

试一下这个吧
System Protector manual removal:
Kill processes:
install.exe lsascs.exe windll32.exe
HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" => 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lsascs.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Protector"
HELP:
how to remove registry entries

Unregister DLLs:
shellex.dll

HELP:
how to unregister malicious DLLs

Delete files:
install.exe lsascs.exe shellex.dll windll32.exe SpyProtectorSC_Base_new.dat SpyProtectorSC_Config.ini System Protector.lnk Purchase License.url Support Page.url spyprotector.cpl
HELP:
how to remove harmful files

Delete directories:
C:\Program Files\System Protector

网站的联接是http://www.2-spyware.com/remove-system-protector.html

vivianqq

thank you so much,

vivianqq

thanks, your advice

vivianqq

hi, what's winpe

vivianqq

i went to the webside, i couldn't find any of the registry values on my computer now,  what shouuld i do now

lijin40000

you mean you couldn't find any registry values on that list in your registry, is that right?

vivianqq

yes, so what should i do

vivianqq

and, the computer is off line now , but always coming up information :   the webpage you requested is not available offline, to view this page, click connect, .

一天

原帖由 vivianqq 于 2009-7-18 22:37 发表
hi, what's winpe

虽然没用过，网上查查 Win pe下载能找到很多。

lijin40000

不要进safe mode正常启动windows你应该会找到那些东西

lijin40000

在你删任何东西之前,一定要把重要的文件做backup,万一你删完不能进windows你就麻烦了,如果不行的话,就只能重装windows了

pctech

顶LSD的MM

胡思≮乱想

han....ls and ls you guys flirting?