Friday, February 18, 2005

中招了

今天中了一隻ntdhcp.exe的病毒,連norton antivirus 2005都看不出它是病毒....
它在C:\WINDOWS\system32\NTdhcp.exe
cmd -> cd c:\windows\system32
dir nt*.exe /a
attrib -s -h -r ntdhcp.exe
del ntdhcp.exe

並在taskman中把它剎死

還要用regedit把它啟動取消...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NTdhcp"="C:\\WINDOWS\\system32\\NTdhcp.exe"

No comments: