請問呢個係咩病毒..整唔走=_=
我個norton呢排係咁彈個叫pwsteal.linczxxx(唔記得叫咩名).既file
say高度危險..but又存取唔到,,又修復走.=_=
剩係比我按確定..仲係咁彈出黎..
我要關左norton個自動防護 先唔彈出黎
究竟係咩黎 and點樣可以整走佢? [quote]Originally posted by [i]tcm0002[/i] at 2005-5-11 18:45:
我個norton呢排係咁彈個叫
pwsteal.l... [/quote]
does yr IE load very slow~~~???? 無ar>我個ie無問題@@ 你睇清楚少少個檔案名係 pwsteal.xxxxx
真係 pwsteal.linczxxx ??
去過 norton 管網, 未呢隻毒既資料
pwsteal.lemir 就有 我打liexx..
係因為我唔記得左點串..
係你say個個喇..
我查過係天堂既木馬..
but我玩ro..會唔會有事.
我個norton要次次開機set 關閉自動防護 先唔彈出黎.. 個尾係 f 定 b ???
pwsteal.lemir.f 定 pwsteal.lemir.b
[url]http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.lemir.f.html[/url]
[url]http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.lemir.b.html[/url]
幫你簡單咁譯一譯
1) 關左個系統還原
2) update 個防毒既定義檔
3) 全系統掃描一次
4) 然後開 registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
delete 左呢個 "wintask"="%system%\wintask---"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
delete 左呢個 LTSMSG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
delete 左呢個 LTSMSG
[[i] Last edited by rym82 on 2005-5-11 at 08:19 PM [/i]] 第一同第二點整?? 我的電腦上right click 一下 > 內容
系統還原 > "關閉所有硬碟的還原"
update 個防毒既定義檔 <~~~ 更新你個 norton 就得 咁即係呢個係唔使format既解決方法? 無錯....唔洗 format sorry/我係唔識第四個@@
now 1,2,3都識整.. 物件名稱 c:\windows\nsvc.dll
病毒名 PWSteal.Lineage [url]http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.lineage.html#removalinstructions[/url]
# Disable System Restore (Windows Me/XP).
# Update the virus definitions.
# Restart the computer in Safe mode.
# Run a full system scan and delete all the files detected as PWSteal.Lineage.
# Reverse the changes made to the registry.
o係呢個系統掃描前, 先重新啟動電腦, 進入安全模式
方法o係 load 入 windows 前按 F8
然後就系統掃描
而更改 registry 方法係
開始 > 執行 > 輸入 "regedit"
然後去 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
即首先o係左邊揀 HKEY_LOCAL_MACHINE
然後揀 SOFTWARE
去到 run 之後
o係右邊果度會出現一堆野
你delete 左佢就得
"[Random Name]" = "%ProgramFiles%\rundll32---"
"[Random Name]" = "%ProgramFiles%\explorer---"
"[Random Name]" = "%ProgramFiles%\Internat---"
"[Random Name]" = "%windir%\rundll32---"
"[Random Name]" = "%windir%\Internat---"
跟住結果就得
頁:
[1]