中讀了...刪不掉..

[kme]

各位大大.請幫幫我

中讀了...刪不掉..

W32.Looked.C

[不飛]

轉載
http://securityresponse.symantec.com....looked.c.html

Windows NT/2000/XP
To end the malicious process:
Press Ctrl+Alt+Delete once.
Click Task Manager.
Click the Processes tab.
Double-click the Image Name column header to alphabetically sort the processes.
Scroll through the list and look for IEXPLORE.EXE.
If you find the file, click it, and then click End Process.
Exit the Task Manager.


4. To scan for and delete the infected files
Start your Symantec antivirus program and make sure that it is configured to scan all the files.
For Norton AntiVirus consumer products: Read the document, "How to configure Norton AntiVirus to scan all files."
For Symantec AntiVirus Enterprise products: Read the document, "How to verify that a Symantec Corporate antivirus product is set to scan all files."
Run a full system scan.
If any files are detected as infected with W32.Looked.C, click Delete.
If you are still in Safe mode, restart the computer in Normal mode before proceeding to the next section.


5. To reverse the changes made to the registry
Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified subkeys only. Read the document, "How to make a backup of the Windows registry," for instructions.

Click Start > Run.
Type regedit

Then click OK.


Navigate to the subkey:

HKEY_LOCAL_MACHINE\Software\Soft\DownloadWWW


In the right pane, delete the value:

"auto" = "1"


Exit the Registry Editor.