Vista ARTICLES Vista的文章 TOP 50排名前50位 Spyware Virus間諜軟件病毒 Vista SOFT Vista的軟 Vista HELP Vista幫助

Manual Removal of W32/XPAntivirus.TF Trojan手動清除木馬W32/XPAntivirus.TF

Manual Removal of W32/XPAntivirus.TF Trojan 手動清除木馬W32/XPAntivirus.TF

W32/XPAntivirus.TF is a Trojan. W32/XPAntivirus.TF是一個木馬程序。 The Trojan will infect Windows systems. 該木馬會感染Windows系統。
The trojan may be dropped by other malware or may be downloaded from remote website by other malware. 該木馬可能會下降了其他惡意軟件或可從遠端網站由其他惡意軟件。
It may also be downloaded unknowingly by a user while visiting malicious Website. 還可以下載不知情的用戶在訪問惡意網站。
This Trojan first appeared on October 8, 2008. 該木馬首次出現在2008年十月八日。
Other names of W32/XPAntivirus.TF Trojan: 其他名稱的W32/XPAntivirus.TF木馬：
This Trojan is also known as 該木馬也被稱為
VirTool:Win32/Obfuscator.BI, Mal/EncPk-CZ, not-a-Virus:FraudTool.Win32.XPAntivirus.tf. VirTool ： Win32/Obfuscator.BI ，馬累/ EncPk ，長征，而不是一個病毒： FraudTool.Win32.XPAntivirus.tf 。

Damage Level : Highly Dangerous 危害等級：高度危險
Distribution Level: High / Medium 分佈水平：高/中等
There is NO Auto Removal Tool for W32/XPAntivirus.TF Trojan 沒有自動清除工具W32/XPAntivirus.TF木馬

Trojan Manual Removal Instructions 木馬手動移除指示
Recommend Removal from Safe Mode: 建議去除安全模式：
How to Start in Safe mode: 如何啟動安全模式：
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter. 重新啟動計算機，按F8反复，當您的屏幕打開，選擇安全模式，按Enter 。

The Infected Files Can be Seen in these folders and names also Running in Tasks 在受感染的文件中可以看出這些文件夾中也姓名和運行任務
End the Following Active Process Before Removal 完下面的積極過程，然後才能清除

%Program Files%\rhcjg7j0e38v\rhcjg7j0e38v.exe ％ Program Files文件％ \ rhcjg7j0e38v \ rhcjg7j0e38v.exe
%Program Files%\rhcjg7j0e38v\msvcp71.dll ％ Program Files文件％ \ rhcjg7j0e38v \ msvcp71.dll
%Documents and Settings\[User Name] ％的Documents and Settings \ [用戶名] \Local Settings\Temporary Internet Files\Recent\images of xpantivirus2008.lnk \本地設置\ Internet臨時文件\最新\圖像xpantivirus2008.lnk
%Documents and Settings\ ％的Documents and Settings \ [User Name] [用戶名] \Local Settings\Temporary Internet Files\Recent\ \本地設置\ Internet臨時文件\新\ New Text Document.txt.lnk 新案文Document.txt.lnk
Task Manager Running Processes 任務管理器運行的進程
XPAntivirus.exe XPAntivirus.exe
xpa.exe xpa.exe
xpa2008.exe xpa2008.exe
XPAntivirusUpdate.exe XPAntivirusUpdate.exe
% Program Files\XPAntivirus \ ％ Program Files文件\ XPAntivirus \
xpa.exe xpa.exe
xpa2008.exe xpa2008.exe
XPAntivirus.exe XPAntivirus.exe
XPAntivirusUpdate.exe XPAntivirusUpdate.exe
shlwapi.dll shlwapi.dll
wininet.dll wininet.dll
XP antivirus XP的防毒
XPAntivirus.lnk XPAntivirus.lnk
Uninstall XPAntivirus.lnk 卸載XPAntivirus.lnk
XPAntivirus on the Web.lnk XPAntivirus的Web.lnk
XPAntivirus.url XPAntivirus.url
XPAntivirus2008.lnk XPAntivirus2008.lnk
Uninstall XPAntivirus2008.lnk 卸載XPAntivirus2008.lnk

If you have any of these files in running process from task manger, end the process before removal. 如果您有任何這些文件在運行過程中的任務馬槽，年底之前，該進程的清除。
Note: if task manager is disabled, Download the following file, 注意：如果任務管理器被禁用，下載以下文件， Click to Download - Enable Registry.reg 點擊下載-啟用R egistry.reg

To un-register the .dll Files 若要取消註冊。 dll文件
Click Start, and then click Run.單擊開始，然後單擊運行。
Type, or copy and paste, the following text: 類型，或複製並粘貼，以下文字：
regsvr32 /u shlwapi.dll regsvr32 / U系列 shlwapi.dll
then click OK. 然後單擊確定。
regsvr32 /u wininet.dll regsvr32 / U系列 wininet.dll
then click OK. 然後單擊確定。
Manually Remove From Registry 手動刪除從註冊表
Click Start, Run,Type regedit,Click OK. 單擊開始，運行，鍵入regedit ，按確定。
Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. 注意：如果註冊表編輯器無法打開的威脅可能會修改註冊表，以防止進入註冊表編輯器。 Download and run this 下載並運行此 UnHookExec.inf UnHookExec.inf , and then continue with the removal. ，然後繼續拆除。

HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE \ \軟件\微軟\的Windows \ CurrentVersion \運行

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XPAntivirusFilter HKEY_LOCAL_MACHINE \系統\ CurrentControlSet \服務\ XPAntivirusFilter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP antivirus_is1 HKEY_LOCAL_MACHINE \軟件\微軟\的Windows \ CurrentVersion \卸載\ XP的antivirus_is1
HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run\”XP antivirus” = “C:\Program Files\XPAntivirus\XPAntivirus.exe” HKEY_USERS \軟件\微軟\的Windows \ CurrentVersion \運行\ “ XP的防病毒” =的“ C ： \ Program Files文件\ XPAntivirus \ XPAntivirus.exe ”
XP antivirus XP的防毒
HKEY_USERS\Software\XP antivirus HKEY_USERS \軟件\ XP的防毒

_+ Any of the Above Listed Files +_ _ +上述任何上市文件+ _

Search Registry For Virus File Names listed above to remove completely, 註冊表搜索病毒文件名上面列出的完全消除，
Edit Menu - Find , enter Keyword and remove all value that find in search . 編輯菜單-查找，輸入關鍵字，並刪除所有價值，發現在搜索。
Exit the Registry Editor,退出註冊表編輯器，
Restart your Computer.重新啟動計算機。
Recommended Removal Tools: 推薦的清除工具：
Kaspersky Antivirus or Internet Security 卡巴斯基防毒或網際網路安全性 ( Shareware ) （共享）
Spyware Doctor 間諜醫生 ( Shareware ) （共享）
AVG Antivirus 的AVG防毒 ( Freeware ) （免費）
Killbox Killbox ( Freeware ) （免費）