今天中了一隻ntdhcp.exe的病毒,連norton antivirus 2005都看不出它是病毒....
它在C:\WINDOWS\system32\NTdhcp.exe
cmd -> cd c:\windows\system32
dir nt*.exe /a
attrib -s -h -r ntdhcp.exe
del ntdhcp.exe
並在taskman中把它剎死
還要用regedit把它啟動取消...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NTdhcp"="C:\\WINDOWS\\system32\\NTdhcp.exe"
No comments:
Post a Comment