The virus registers itself as an NT service in order to boot up:
[Tomdemoservice/tomdemoservice] [Running/auto Start] <c:\config. Exe><n/a>
Delete method:
1, first delete the file can be considered tools POWERRMV or Xdelbox
C:\CONFIG. Exe
C:\CONFIG.dll is ignored if it does not exist.
C:\CONFIG_key.dll is ignored if it does not exist.
C:\CONFIGhook.dll is ignored if it does not exist.
C:\CONFIG.log is ignored if it does not exist.
2, restart the computer into Safe mode, with Sreng to remove registered services
Start the project--> service-->win32 The following item deletion of the service application
[Tomdemoservice/tomdemoservice] [Running/auto Start] <c:\config. Exe><n/a>
It is best to recommend 360 security Defender to download the address: Www.360safe.com can be detected after all selected points clean (delete)
Finally pay attention to revise QQ, network game account password and so on.
Appendix A few cases to remedy the case:
Copy Code code as follows:
specific case 1:
Sender: match510520 (pick you up at the West station!) ), : virus
Standard title: Computer every 10 seconds "boom", please help me look at log, thank you!
Letter Station: Water Wood Community (mon apr 2 12:37:24 2007), station
Every "thump" interval is about 10 seconds. This sound is like a pop-up dialog, you are not certain or cancel, and in other places when the point of the sound of the "thump". Don't know how to solve? Please help the cow, thank you!
Case 2: I would like to ask you master, my machine suddenly appeared to be a problem today, that is, after the boot always have a beep, every 10 seconds or so sound, is "clang" of a sound. Repeated anti-virus also does no avail. I beg you to help the heroes.
Questioner Feedback: has been resolved.
Case 3: I would like to ask you master, my machine suddenly appeared to be a problem today, that is, after the boot always have a beep, every 10 seconds or so sound, is "clang" of a sound. Repeated anti-virus also does no avail. I beg you to help the heroes.
