Virus filename: Stup.exe
File path: C:\progra~1\tencent\adplus\stup.exe (in most cases)
(Note: There may be Soso address bar plug-ins, if found in the above path, it is the virus, to No, is Soso)
Note: This virus file may be through QQ, MSN, mail transmission, in most cases, the default is saved in the QQ Tencent folder; If the machine is through the company LAN Internet access, running the virus will prevent the virus and router server data transmission between the virus, so that the computer can not access the network; The virus defaults to modify the PC's registry, randomly started;
Virus cleanup:
1, reboot the system, into safe mode;
2, find the C:\progra~1\tencent folder, the folder to delete the ADPlus folder;
3, search Stup related files with system search function, find and delete;
4, enter the Registry manager: Start menu-run-input regedit―― double-click "My Computer Item" in Registry Manager-and then select "Edit" menu-Find-Enter Stup lookup-by "Find Next" delete all relevant content;
Ok, this virus has been cleaned up, restart the computer;
Note: Some computer startup will appear a DOS call window, this is a Trojan virus in the call virus file, if this phenomenon, you can remember the DOS boot file name, according to the above method to clear;
The illegal processes found at the same time are: Appevent.exe, Ylive.exe, PYJJKIME.exe