Author:Endurer
Today, a friend said that his computer had a QQ tail virus.
I will help you after work.
1. Use hijackthis to scan logs and find suspicious processes C:/Windows/system/rundll32.exe.
2. Go to http://online.rising.com.cn/ravonline/ravsoft/rav.asp and use rising stars for free scanning:
The virus Process C:/Windows/system/rundll32.exe is terminated by rising.
3. Next, set the system to display all files and folders, and display the extensions of all files,
The operation is as follows:
1. Start my computer or Windows Resource Manager.
2. Click View menu (Windows 95/98/NT) or tool menu (Windows ME/2000/XP), and then click options or folder options ".
3. Click the view tab.
4. deselect "Hide extensions of known file types ".
5. Perform one of the following operations:
Windows 95/NT. Click Show all files ".
Windows 98. In the "Hidden Files" folder in the "Advanced Settings" box, click "show all files ".
Windows ME/2000/XP: cancels the hook before "Hiding protected OS Files" and in the "hide files and folders" folder, click Show all files and folders ".
6. Click "application", and then click "OK ".
4. Find the Virus File
That is:
C:/Windows/system32/. EXE: Trojan. qqtail. AG
C:/Windows/system32/notepad.exe: Trojan. qqtail. AG
C:/Windows/system/rundll32.exe: Trojan. qqtail. AG
C:/program files/Tencent/QQ/167486104/myrecvfiles/ (((((wor. jpg.exe is Worm. QQ. topfox.
As follows:
Delete them .....
If you use the "Rising Antivirus assistant", you can click the "d delete all infected files" button on the "Rising Antivirus assistant" window in Steps 3 and 4.
Click here to download Rising anti-virus assistant for Win 2000/XP
Click here to download Rising anti-virus assistant for Win 95/98/me