求助 - 中 Infostealer.Lineage 病毒

[放下是真功夫]

Startup Folders
Services
[Symantec Event Manager / ccEvtMgr]
<"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc]
<"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr]
<"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Norton AntiVirus Auto-Protect Service / navapsvc]
<"C:\Program Files\Norton AntiVirus\navapsvc.exe"><Symantec Corporation>
[Norton AntiVirus Firewall Monitor Service / NPFMntor]
<"C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe"><Symantec Corporation>
[SAVScan / SAVScan]
<"C:\Program Files\Norton AntiVirus\SAVScan.exe"><Symantec Corporation>
[ScriptBlocking Service / SBService]
<C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe><Symantec Corporation>
[Symantec Network Drivers Service / SNDSrvc]
<"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc]
<"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><Symantec Corporation>
[Symantec Core LC / Symantec Core LC]
<C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe><Symantec Corporation>

[didi]

一般要做掃除木馬或病毒的動作時,可先備份好重要資料
做好相關的updte,網路段線,並將windows的系統還原關閉後,再執行移除動作

[放下是真功夫]

方法2：
使用WinsockFix使用一下註冊表
建議操作之前備份一下註冊表

請問 在這的註冊表是什麼意思?


執行備份 出現錯誤~~結果如下


Error Saving file
C:\ERDNT\SECURITY

Continue with next file


Error Saving file
C:\ERDNT\SOFTWARE

Continue with next file


Error Saving file
C:\ERDNT\SYSTEM !

Continue with next file


Error Saving file
C:\ERDNT\DEFAULT !

Continue with next file


Error Saving file
C:\ERDNT\SAM !

Continue with next file


Error Saving file
C:\ERDNT\Uusrs\S-1-5-21-2000478354-1957994488-941990147-500\
Ntuser.dat


Continue with next file?


Error Saving file
C:\ERDNT\Uusrs\S-1-5-21-2000478354-1957994488-941990147-
500-Classes\UserClass.dat !


Continue with next file?

方法3：
使用SP2ConnectivityFix工具（注意本工具只適合於XPSP2系統）

我的不是這版本 沒辦法用