QQ pilfer number Trojan Horse Usbine.sys temporarily solves the method

QQ Password can not enter 16 digits.

may have killed the soft already alert C:\WINDOWS\SYSTEM32\DRIVERS\USBINE. SYS is a virus, right?

Because there are no virus source files. Another driver protection file cannot be parsed for the time being. So there's not a lot to know about the virus.

But the other one should just play the role of protecting Usbine.sys?

This driver file cannot be deleted either in normal mode or in Safe mode.

You are also prompted to not find the file in DOS.

Wait until you find another poisoned machine and do the test.

A temporary solution:

DOS deletion hint cannot be found. But it can be edited. And the driver that protects the Usbine.sys is not loaded in safe mode.

Edit in DOS first. (NTFS available with Max DOS 5.8S or Windows Recovery Console operation)

Switch the directory to the system32\drivers below. Then enter the command:

Edit Usbine.sys

Remove all content after entering the interface. Exit after saving.

Then reboot into Safe mode. Add system read-only and hidden attributes to Usbine.sys.

attrib C:\windows\system32\drivers\usbine.sys +h +r +s

Preconceived. There was nothing to protect the driver. And then it's OK.

Wait until I find another poisoned machine or find a better way to tell you.