EndurerOriginal
1Version
A netizen accidentally installed the update program of Microsoft's genuine value-added plan. A blue pentagram symbol will appear in the lower right corner of the taskbar, which makes it uncomfortable.
Scan and repair with hijackthis via QQ Remote Assistance (hijackthis can be downloaded from http://endurer.ys168.com ):
O20-Winlogon notify: wgalogon-C:/Windows/system32/wgalogon. dll
Restart your computer, and there will be no more stars in the lower right corner.
Of course, you can also use the rising Card Security Assistant to cancel this boot item.
You can also delete the following files:
C:/Windows/system32/wgatray.exe
C:/Windows/system32/dllcache/wgatray.exe
C: Windows/system32/wgalogon. dll
C: Windows/system32/dllcache/wgalogon. dll
I used Google to view a bat written by a foreign netizen on a foreign Forum:
Taskkill/IM wgatray.exe
Del C:/Windows/system32/wgatray.exe
Del C:/Windows/system32/dllcache/wgatray.exe
Echo Windows Registry Editor Version 5.00> % Temp %/wganfix. Reg
Echo.> % Temp %/wganfix. Reg
Echo [-HKEY_LOCAL_MACHINE/software/Microsoft/Windows NT/CurrentVersion/Winlogon/y/wgalogon]> % Temp %/wganfix. Reg
Regedit/S % Temp %/wganfix. Reg
Del % Temp %/wganfix. Reg
Del C: Windows/system32/wgalogon. dll
Del C: Windows/system32/dllcache/wgalogon. dll
This is only effective for Windows XP installed in C:/windows:
Taskkill/IM wgatray.exe
Echo Windows Registry Editor Version 5.00> % Temp %/wganfix. Reg
Echo.> % Temp %/wganfix. Reg
Echo [-HKEY_LOCAL_MACHINE/software/Microsoft/Windows NT/CurrentVersion/Winlogon/y/wgalogon]> % Temp %/wganfix. Reg
Regedit/S % Temp %/wganfix. Reg
Del/Q % Temp %/wganfix. Reg
Del/Q % WINDIR %/system32/wgatray.exe
Del/Q % WINDIR %/system32/dllcache/wgatray.exe
Del/Q % WINDIR %/system32/wgalogon. dll
Del/Q % WINDIR %/system32/dllcache/wgalogon. dll