Solutions to the recent QQ tail "give you a song" virus

Source: Internet
Author: User
Tags virus scan

At first, I only received such virus information from Q friends. I did not expect that after I returned to Shanghai from Suzhou, I won the bid. This is harmless. The virus is as follows: "I just ordered you a nice song and put it in your cell phone mailbox. You can call 590556225 on your cell phone. After hearing this, I will leave a message ". I checked it on the Internet. Some people call this kind of phone, and there is only one RMB for 70 yuan, making money. After killing me for two days, I got lost. I still don't know if I have cleared it all. I asked a number of students, as if I hadn't appeared any more. It was a terrible situation. We will share our solutions with you to resist spam programs made by spammers.
After being poisoned, I downloaded more than N anti-virus software, including the original "Trojan killer", "Kaspersky", and the downloaded software, "QQKAV", "Saint", "rising QQ kill", "Ewido", and "Virus Scan" only have "Ewido" and "QQKAV" detected and killed multiple viruses, but the problem still persists. The virus is even more rampant when I come back from dinner with my colleagues at night. I sent N viruses to my college student. His computer seems to have won the bid and sent it to me. It was blocked by my "QQKAV, is this harmful ~~~~~~~~~~~~ After restarting the computer many times, I found that two unknown processes were running when I started the desktop, and then I lost the process viewer. They are: "8AB0E010. EXE and D504584F. EXE ", go to the Registry and find the two files: Open-start-run-Enter" regedit "-CTRL + F-Write the two file names just now and find them again. It takes a long time ~~ ===== Delete. Continue to try again to prevent deletion, sweating, and getting out again. There is no way to delete it. Find the original file and delete it. Open my computer, use the shortcut key "CTRL + F" to search for it. It is all in WINDOWS. I will delete it ~~~~~~~~~ However, DLL files with different extension names cannot be deleted, and programs may be in use. I am so stupid. Start again, press F8 to enter safe mode, and then delete the DLL file again according to the above steps. delete all the DLL files. OK. The two processes cannot be seen after the restart.
However, when we use Ewido to kill the virus again (maybe in English, I don't know it) HKLM/SOFTWARE/Microsoft/Internet Explorer/ActiveX Compatibility/{471E7641-6365-43FE-8464-37DEF8335FB0}/{signature}-> Adware. newDotNet: No action taken. Find the Registry location, delete it, delete it, and then kill it. If yes, delete it again. If No, delete it in security mode. Re-scan and kill twice. No more. Haha ~~~~~~~~~ I don't know if the problem is finally solved.
If a friend sees a better solution software in this article, please leave a message and tell me, thank you very much for ING.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.