Use hijackthis or Kaka Security Assistant to easily remove the blue pentagram in the Windows XP taskbar
Original endurer2008-03-021Version
After a netizen patched Windows XP, a blue pentagram symbol appeared in the lower right corner of the taskbar, which made me feel uncomfortable.
Via QQ Remote Assistance, to the http://endurer.ys168.com to download hijackthis 1.99.1 close all the browser window and fo
HijackThis is an English free software developed by a Dutch student, Merijn. Its personal home page has Merijn's own profile and offers its own software developed in the spare time for everyone to download. HijackThis can scan the registry and the specific files on the hard disk, and find the entry of some malicious program "hijack" browsers. However, it is important to note that the content may be being us
EndurerOriginal1Version
One netizen's computer used Win XP and accidentally installed Microsoft's genuine value-added program update.ProgramNow there is a blue five-pointed star symbol in the lower right corner of the taskbar, which makes it uncomfortable.
This even previously with hijackthis easily solved, light car familiar road, open the http://endurer.ys168.com, easily download the top hijackthis 2.0.
EndurerOriginal1Version
A netizen accidentally installed the update program of Microsoft's genuine value-added plan. A blue pentagram symbol will appear in the lower right corner of the taskbar, which makes it uncomfortable.
Scan and repair with hijackthis via QQ Remote Assistance (hijackthis can be downloaded from http://endurer.ys168.com ):
O20-Winlogon notify: wgalogon-C:/Windows/system32/wgalogon. dll
R
EndurerOriginal1Version
In the article "application shortcuts pose security risks", I mentioned that a hijackthis system scanner is being written.The o6 group that wrote hijackthis last night, that is, the IE/Ineternet option section.When you find that you are logged on with an account that does not have administrator privileges, the program cannot read key values related to the IE/Ineternet option in the
Believe that the Internet friends have encountered goodwill or malicious Web pages, tampered with their own browser settings, some tampering with the program can be IE Internet Assistant, anti-virus software, and encountered a kind of tamper with the program, such as what search bar and other IE tools, anti-virus software or Internet assistants can do nothing. Then the author today to recommend a can save by "kidnapping" IE browser tool hijackthis, it
I believe that all Internet users have encountered malicious or malicious web pages, tampered with the settings on their browsers, and some of them have been tampered.
Program Internet Explorer and anti-virus software can be exploited, and hackers may encounter malicious tampering programs, such as IE tools such as bar search. Anti-Virus Software or Internet Assistant is powerless. So today, the author recommends a tool hijackthis that can be used to
EndurerOriginal
2006-11-28 th1Version
A netizen's computer recently showed that Yok *. * was infected with the virus. at startup, the system prompts that the file could not be found and asked me to check the file.
Open IE, found that the home page is set to hxxp: // www.my123.com, go to the rising website to download my123.com exclusive tool, download hijackthis to http://endurer.ys168.com, procview.
Scanning with rising my123.com exclusive tool, no s
provides a variety of options. Many damages caused by malicious programs to IE can be cleared or modified here, you can even change it to the content you need, but the operation is slightly troublesome.
Figure 3-3 IE browser Repair Tool
Huangshan ierepair expert
Repair operations by Huangshan ierepair experts are completed at one time, regardless of the modification options or repair restrictions. The repair effect is also clean.
Hijack
.shtml
If the Kill tool did not find the gray pigeon, please refer to the following method to delete manually
Follow the instructions below, 3 steps to completely remove the gray pigeon Trojan horse in the system
1. Download HijackThis Scanning system
Download Address:
http://www.skycn.com/soft/15753.html zww3008 version of Chinese
Http://www.merijn.org/files/hijackthis.zip English version
2. From the HijackThis
EndurerOriginal
2006-11-30 th1Version
On a computer of a netizen, the homepage of IE browser is forcibly set to www.6781.com.
Download hijackthis and procview from http://endurer.ys168.com.
Scan logs with hijackthis to generate a list of startup items, and upload the list of system processes exported with procview.
The following suspicious items are found in the logs scanned by
These days, all the computer browser open automatically open 115.29.163.152/404.html this page, and then automatically jump to hao123 this page, online query no solution. Start looking for yourself, search the registry, are not valid, finally download software HijackThis(HijackThis is an English free software, developed by a Dutch student Merijn. It is available for download with software developed in its s
EndurerOriginal2006-11-171Version
A netizen's computer found a gray pigeon in the past two days.
The following suspicious items are found in the hijackthis log sent by the user:
/-------O2-BHO: Java class-{38ce3843-4420-4aa8-a129-f9e771b4561b}-C:/Windows/Java/classes/Java. dll
O20-appinit_dlls: kernel32.sys-------/
Check with WinRAR:C:/Documents and Settings/user/Local Settings/temp/-------------------------------Emtv.com (the Kaspersky report isTroja
protect your PC from unauthorized access, information theft, and system performance degradation. Spyware, advertising, and other non-viral threats are spreading rapidly, showing a major security and privacy risk. ETrust PestPatrol Anti-spyware can reduce this risk and provide an additional layer of protection for secure Internet connections. two. Other auxiliary tools. 1, LSP Fix (English version). Specifically used to help repair the 010 options in Hijac
EndurerOriginal
2Add a new version1Version
This morning, some netizens asked for help. The rising real-time monitoring umbrella icon in the lower-right corner of his computer screen is gone, and it cannot be started manually.
With QQ Remote Assistance, run the rising registry Repair Tool and find that the EXE file association and system startup items (that is, F2 items in the following hijackthis log) have been modified.
: 219.235.3.16 www.sososo.comO1-hosts: 219.235.3.16 sou.china.comO1-hosts: 219.235.3.16 test.591jx.comO1-hosts: 219.235.3.16 a.topxxxx.cnO1-hosts: 219.235.3.16 picon.chinaren.comO1-hosts: 219.235.3.16 www.5566.net
O21-ssodl-qtfstqywi ()-{ed5810ca-65d0-ba25-76e1-65d09842c225} = C:/Windows/system32/loanoltrd. dll
The original malicious program modified the hosts file (O1 in hijackthis/pe_xscan log ).
We downloaded Jinshan cleaning experts from other co
EndurerOriginal
2006-10-15 th1Version
Last night, a colleague said that his computer was slow and he could play online games, but not browse the webpage ...... Let me check for help.
The computer uses Win XP SP2, which is equipped with Jiangmin kv2006 anti-virus software and outpost firewall.
Worker processes, terminate them, and the system returns normally.
Ping www.163.com. The network connection is normal.
If you want to download the software analysis system from the Internet, you
EndurerOriginal
2006-10-231Version
The QQ keyboard encryption technology in a friend's computer cannot be started. Let's take a look.
Download hijackthis and procview from http://endurer.ys168.com.
Use hijackthis to scan logs and find several suspicious items:/------------Logfile of hijackthis v1.99.1Platform: Windows XP SP2 (winnt 5.01.2600)MSIE: Internet Explor
unnecessary services. If conditions permit, you can disable unnecessary sharing, such as C $ and D $. A single-host user can directly shut down the Server service. These can be closed with optimization software such as the winxp manager.
Paste. Posted as Bon Jovi in the Yifan virus rescue zone
Gray pigeon Vip 2005 Cleaning Device
Http://ftpe.ttian.net/2005/07/DelHgzvip2005Server.zip
BlackHole dove backdoor exclusive Tool
Http://www.cert.org.cn/articles/tools/common/2005051322256.shtml
If no gr
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.