手动清除木马的一般方法（General method of manually removing Trojan horses）.doc

手动清除木马的一般方法（General method of manually removing Trojan horses） First of all, you have a sign of a Trojan horse. You should first see what your startup group is loaded automatically, The Trojan must be in it. Have you discovered the strange procedure? More than one? It doesnt matter. One by one Come on, write down your name. Then find a process to see the tools (see why the process? A Trojan horse is never a form or hidden, But you cant escape the process viewer), xp/2000 has its own tools, ctrl+shift+esc, 98/me Using windows to optimize the masters process viewer. After you find the process, end his process (otherwise, how can the program be deleted in use?) And then To start deleting (because senior Trojan points have protection function, such as multi line, Trojan). Quarantine again Suspect procedure. Finally, restart the computer. One step at a time, or how do you know which one is the Trojan horse? But if you are familiar with your computer, you can usually see what is not your own program. If there are still signs of a Trojan horse, repeat the steps above. If you already know the location of the Trojan program, then end the process, then delete the startup project and delete the Trojan program. Reset. After reading, do you think its easy, just a few steps? :) ############### windows9x/me some of the self starting method ######### 1. Autostart files C:\windows\start menu\programs\startup {chinese/english} Location in registry: HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders Startup= C:\windows\start menu\programs\startup So it will be easily changed by the program 2. Win.ini [windows] Load=file.exe Run=file.exe 3. System.ini [boot] Shell=Explorer.exe file.exe 4. c:\windows\winstart.bat It seems normal, but it restarts every time 5. Registry key [HKEY_LOCAL_MACHINE \Software\Microsoft\Windows\CurrentVersion\RunServices] [HKEY_LOCAL_MACHINE \Software\Microsoft\Windows\CurrentVersion\RunServicesOnce] [HKEY_LOCAL_MACHINE \Software