手工的拿走Backdoor.Graybird特洛伊的Spyware

手工的拿走Backdoor.Graybird特洛伊的Spyware

其它的名为Backdoor.Graybird特洛伊人:
这个特洛伊人也是以是特洛伊人-

Dropper.Win32.Agent.aang.Damage水平而闻名:高度//介质
散发水平:未知

禁止为Backdoor.Graybird特洛伊的Spyware汽车搬迁工具
给手工搬迁指令打虫子
推荐解除安全方式:
怎样进入开始安全方式:
重新开始你的电脑,反复敦促F8,当你的屏幕打开的时候,选择安全方式,敦促进入.

感染文件能被在这些文件夹和名字中明白也进来一会儿任务
在搬迁以前结束下列的活跃过程

%AppData%\keyfolder\filewin.exe
%CommonFavorites%\netservice.exe
%CommonFavorites%\plug\001.dll
%DownloadedProgramFiles%坸y.exe
%InternetCache%\qq.exe
%ProgramFiles%\advanced看不见keylogger\win16sys.dll
%ProgramFiles%\bbs.hksxs.com.exe
%ProgramFiles%\commonfiles\360safe\qq.com
%ProgramFiles%\commonfiles\directdb.com
%ProgramFiles%\commonfiles\iugaq.exe
%ProgramFiles%\commonfiles\netdde.dll
%ProgramFiles%\commonfiles\netdde.exe
%ProgramFiles%\commonfiles\netddekey.dll
%ProgramFiles%\commonfiles\syskey.dll
%ProgramFiles%\commonfiles\system\msadc\nettps.dll
%ProgramFiles%\commonfiles\system\msadc\nettps.exe
%ProgramFiles%\commonfiles\system\msasp32.exe
%ProgramFiles%\commonfiles\system\nvcpl.exe
%ProgramFiles%\commonfiles\system\services.exe
%ProgramFiles%\commonfiles\system\svchostsers.com
%ProgramFiles%\hacke.cn.exe
%ProgramFiles%\hgzserver\adminis.exe
%ProgramFiles%\hgzserver006.dll
%ProgramFiles%\hgzserver006key.dll
%ProgramFiles%\hgzserver\hacker.com.cn.exe
%ProgramFiles%\hgzserver\shuibai8.exe
%ProgramFiles%\hgzuerver\hacker.com.cn.exe
%ProgramFiles%\intel\intel.exe
%ProgramFiles%\intel\intell.dll
%ProgramFiles%\internetexplorer\connection wizard\auiyg.exe
%ProgramFiles%\internetexplorer\connection wizard\svchosi.exe
%ProgramFiles%\internetexplorer\inexplore.com
%ProgramFiles%\internetexplorer\svchosi.exe
%ProgramFiles%\internetexplorer\svchost.dll
%ProgramFiles%\internetexplorer\svchostkey.dll
%ProgramFiles%\internetexplorer坸e.dll
%ProgramFiles%\java\javs.exe
%ProgramFiles%\meteors\svchost.dll
%ProgramFiles%\meteors\svchost.exe
%ProgramFiles%\meteors\svchostkey.dll
%ProgramFiles%\outlookexpress
%ProgramFiles%\personal个人电脑spy\win16sys.dll
%ProgramFiles%\qq.exe
%ProgramFiles%\rtlcpli.exe
%ProgramFiles%\server.exe
%ProgramFiles%\windows媒体player\wowuc.exe
%ProgramFiles%\windowsnt\accessories\vbs.exe
%ProgramFiles%\windowsupdate\svchost.exe
%ProgramFiles%\xunjie.cn.exe
%System%\_msinfo.exe
%System%\_publishing.exe
%System%\_usb.exe
%System%\0.exe
%System%\0309c26e.exe
%System%\36dbc900.dll
%System%\3800hk.dll
%System%\487c0a80.exe
%System%\4e17c240.exe
%System%\a340d383.exe
%System%\alxres061230.exe
%System%\anti.dll
%System%\appen.exe
%System%\applictie.exe
%System%\aws.exe
%System%\bifrost\server.exe
%System%\bluefire.exe
%System%\brc_server.exe
%System%\btcrackdll.dll
%System%\btcrackdllfpga.dll
%System%\c2c.dll
%System%\ccevtsvc.exe
%System%\clipbook.exe
%System%\closeapp.exe
%System%\cnxcis.dll
%System%\comsvcs.exe
%System%\cs.exe
%System%\cybertv.exe
%System%\d249ad80.exe
%System%\d249ad80t.exe
%System%\dbmssocns.dll
%System%\ddos.exe
%System%\dhcpserver.dll
%System%\dllcache\msyow.exe
%System%\dllcache\vba.dll
%System%\doskeys.exe
%System%\drivers\etc\l68z386i.dll
%System%\drivers\lpd.sys
%System%\drivers\spoclsv.exe
%System%\drivers\spools.exe
%System%\drivers\svchost.exe
%System%\drivers\system.exe
%System%\dxdiag.com
%System%\enqueue.exe
%System%\expl0rer.exe
%System%\fe.exe
%System%\frundlll.exe
%System%\fservice.exe
%System%\hyyk.dll
%System%\hz_sys_temtray.dll
%System%\iexplqre.exe

如果你在从任务食槽运作过程方面有文件任何这些,在搬迁以前结束过程.
笔记:如果任务经理是丧失能力的,下载下列的文件,轻点下载--有助于Registry.reg

手工从登记处移居
轻点出发,跑步,把regedit归类,尚可发出轻微而急促的声音.
笔记:如果登记处编辑未能打开,威胁可以已经修改登记处阻碍到登记处编辑的通路.下载和运作这UnHookExec.inf,然后继续搬迁.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
在正确窗玻璃片中,删除价值:
"g.exe"="%Windir%\g.exe"
航行向前和删除下列的亚关键:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
\GrayPigeonServer
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root
\LEGACY_GrayPigeonServer

搜查登记处前面列出病毒文件名字完全移居
编辑菜单--裁决,在搜索上登记关键词和去除所有的裁决的价值.
离开登记处编辑,