手工的拿走W32//AutoRun.DJV蠕虫

手工的拿走W32//AutoRun.DJV蠕虫.

W32//AutoRun.DJV是一只蠕虫.蠕虫将感染视窗系统.
这只蠕虫首先出现在2008年12月3日.
其它的名为W32//AutoRun.DJV蠕动:
这只蠕虫也是以是Worm.Win32.AutoRun.djv,W32.SillyFDC,

WORM_SILLY.GA.Damage水平而闻名:高度//介质
散发水平:未知

为W32//AutoRun.DJV蠕虫汽车搬迁工具
Kaspersky
给手工搬迁指令打虫子
推荐解除安全方式:
怎样进入开始安全方式:
重新开始你的电脑,反复敦促F8,当你的屏幕打开的时候,选择安全方式,敦促进入.

感染文件能被在这些文件夹和名字中明白也进来一会儿任务
在搬迁以前结束下列的活跃过程

%Windows\Msmsgs.exe
%Windows\system.exe
%Windows\bad1.exe
%Windows\bad2.exe
%Windows\bad3.exe

%System%\1025\1025.exe
%System%\1028\1028.exe
%System%\1031\1031.exe
%System%\1033\1033.exe
%System%\1037\1037.exe
%System%\1041\1041.exe
%System%\1042\1042.exe
%System%\1054\1054.exe
%System%\2052\2052.exe
%System%\3076\3076.exe
%System%\3com_dmi\3com_dmi.exe
%System%\catroot\catroot.exe
%System%\catroot2\catroot2.exe
%System%\com\com.exe
%System%\dhcp\dhcp.exe
%System%\directx\dinput\dinput.exe
%System%\directx\directx.exe
%System%\dllcache\dllcache.exe
%System%\drivers\drivers.exe
%System%\svch0st.exe
%Windir%\system\dllhost.com

%AllUsersProfile%\desktop.exe
%AllUsersProfile%\documents.exe
%AllUsersProfile%\drm.exe
%AllUsersProfile%\favorites.exe
%AllUsersProfile%\fotitoella.exe
%AllUsersProfile%\templates.exe
%AppData%\cftmon.exe
%AppData%\flexiblesoft\spirit.exe
%AppData%\microsoft\cdburning\auto.exe
%AppData%\microsoft\cdburning\coolworld.exe
%AppData%\microsoft\cdburning\protector.exe
%AppData%\rocket.exe
%AppData%\spool.exe
%AppData%\spooll.exe
%AppData%\waultc.exe
%AppData%\waults.exe
%CommonAppData%\microsoft.exe
%CommonAppData%\microsoft\crypto.exe
%CommonAppData%\microsoft\crypto\dss.exe
%CommonAppData%\microsoft\crypto\dss\fondo1024x768.exe
%CommonAppData%\microsoft\crypto\dss\machinekeys.exe
%CommonAppData%\microsoft\crypto\dss\machinekeys\img00002.exe
%CommonAppData%\microsoft\crypto\fotocote.exe
%CommonAppData%\microsoft\crypto\rsa.exe
%CommonAppData%\microsoft\crypto\rsa\machinekeys.exe
%CommonAppData%\microsoft\crypto\rsa\mariajose.exe
%CommonAppData%\microsoft\crypto\rsa\s-1-5-18.exe
%CommonAppData%\microsoft\ctfmon.exe
%CommonAppData%\microsoft\fotocote.exe
%CommonAppData%\microsoft\mediaindex\fotomj.exe
%CommonAppData%\microsoft\mediaplayer\fondo1024x768.exe
%CommonAppData%\microsoft\network.exe
%CommonAppData%\microsoft\network\connections.exe
%CommonAppData%\microsoft\network\connections\cm.exe
%CommonAppData%\microsoft\network\connections\cm\fotomj.exe
%CommonAppData%\microsoft\network\connections\img000152.exe
%CommonAppData%\microsoft\network\connections\pbk.exe
%CommonAppData%\microsoft\network\scs000132.exe
%CommonAppData%\microsoft\spirit.exe
%CommonAppData%\microsoft坸鞘鰌ictures\bro_act.exe
%CommonAppData%\microsoft坸鞘鰌ictures\yoppp_playa.exe
%CommonAppData%\vb.net.exe
%CommonAppData%\vmware.exe
%CommonAppData%\vmware\fotitoella.exe
%CommonAppData%\vmware\vmwaretools\fondo1024x768.exe
%CommonDesktopDir%\desktop.exe
%CommonDesktopDir%\files.exe
%CommonDesktopDir%\foto_ella_bikini.exe
%CommonDesktopDir%\newfolder.exe
%CommonDesktopDir%\notepad.exe
%CommonDocuments%\bro_act.exe
%CommonDocuments%\mymusic\accounting.exe
%CommonDocuments%\mymusic\bro_act.exe
%CommonDocuments%\mymusic\fotowena.exe
%CommonDocuments%\mymusic\my playlists\fotocote.exe
%CommonDocuments%\mymusic\sample music\bro_act.exe
%CommonDocuments%\mymusic\sample music\lastscan.exe
%CommonDocuments%\mymusic\sample playlists\00090beb.exe
%CommonDocuments%\mymusic\sample playlists\lastscan.exe
%CommonDocuments%\mypictures\bro_act.exe
%CommonDocuments%\mypictures\sample pictures\bro_act.exe
%CommonDocuments%\mypictures\sample pictures\fotitoella_10.exe
%CommonDocuments%\mypictures\sample pictures\sunset.exe
%CommonDocuments%\mypictures\sample pictures\winter.exe
%CommonDocuments%\myvideos\bro_act.exe
%CommonDocuments%\myvideos\fotitoella_10.exe
%CommonFavorites%\img000152.exe
%CommonPrograms%\accessories.exe
%CommonPrograms%\accessories\accessibility.exe
%CommonPrograms%\accessories\accessibility\img000152.exe
%CommonPrograms%\accessories\communications.exe
%CommonPrograms%\accessories\entertainment.exe
%CommonPrograms%\accessories\entertainment\fotitoella.exe
%CommonPrograms%\accessories\systemtools\foto_respaldo1.exe
%CommonPrograms%\administrativetools\img000152.exe
%CommonPrograms%\fotobikini.exe
%CommonPrograms%\programs.exe
%CommonPrograms%\startup.exe
%CommonPrograms%\startup\avp.exe
%CommonPrograms%\startup\bro_act.exe
%CommonPrograms%\startup\folderwiz.com
%CommonPrograms%\startup\lsass.exe
%CommonPrograms%\startup\mediaplayer.exe
%CommonPrograms%\startup\msconfig.exe
%CommonPrograms%\startup\osa.exe
%CommonPrograms%\startup\plus.exe
%CommonPrograms%\startup\setup.exe
%CommonPrograms%\startup\startup.exe
%CommonPrograms%\startup\svchots.exe
%CommonPrograms%\startup\systemil2.exe
%CommonPrograms%\startup\tati.exe
%CommonPrograms%\startup\winlogon.exe
%CommonPrograms%\startup\winsys2.exe
%CommonStartMenu%\programs.exe
%CommonStartMenu%\yoppp_playa.exe
%CommonTemplates%\img00002.exe
%CommonTemplates%\spss.exe
%DesktopDir%\desktop.exe
%DownloadedProgramFiles%\svchost.exe
%Favorites%\links.exe

如果你在从任务食槽运作过程方面有文件任何这些,在搬迁以前结束过程.
笔记:如果任务经理是丧失能力的,下载下列的文件,轻点下载--有助于Registry.reg
手工从登记处移居
轻点出发,跑步,把regedit归类,尚可发出轻微而急促的声音.
笔记:如果登记处编辑未能打开,威胁可以已经修改登记处阻碍到登记处编辑的通路.下载和运作这UnHookExec.inf,然后继续搬迁.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Msmsgs.exe
system.exe

搜查登记处前面列出病毒文件名字完全移居
编辑菜单--裁决,在搜索上登记关键词和去除所有的裁决的价值.