360 Trojan Removal

When I got online two days ago, my computer was infected with a virus, and 360 was shut down abnormally. After kazski is used to search for the virus, it finds that assumer.exe is infected with the virus. After the virus is cleared and restarted, 360 cannot be started on its own. After manually enabling 360, it is found that all its protection has been disabled. It is suspected that 360 may be infected with a Trojan, go to the 360 installation directory and find an additional safemon_0 folder. After opening the folder, you will find all the files in the original 360 safemon folder. Open the safemonfile folder, and there is only one image-less file named 360tray.exe. Therefore, we can confirm that the original 360 safemon file name was replaced by the Trojan to safemon_0, And the trojan disguised itself as a safemon. So I modified the names of the two folders and deleted the safemon_0 folder, but the system prompts that the deletion was restricted. This may be because the explorer process is injected by a Trojan. In this case, enable icesword, go to the 360 directory, force Delete safemon_0, and restart the system to restore the server to normal.