21. Dark Shadow ,
nike air force
steps to remove trojan:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE MicroSoft Windows CurrentVersion RunServices
remove the right of the winfunctions = winfunction *.** e
OK
22. DeepThroat v1.0 - 3.1 + Mod (Foreplay)
steps to remove Trojan:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE MicroSoft Windows CurrentVersion Run
version 1.0
the right to delete items 'System32' = c: windows system32.exe
versions 2.0-3.1
the right to delete items 'SystemTray' = 'Systray.exe'
Save Regedit,
Three Criminals In The Sahara,
air force one low, restart Windows
version 1.0 delete c: windows system32.exe
versions 2.0-3.1
delete c: windows system systray.exe
OK
23. Delta Source v0.5 - 0.7
steps to remove trojan:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE MicroSoft Windows CurrentVersion Run
Remove the right side of the project: DS admin tool = C: TEMPSERVER.exe
save Regedit, restart Windows
find C: TEMPSERVER.exe, and delete it.
OK
24. Der Spaeher v3
steps to remove trojan:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE MicroSoft Windows CurrentVersion Run
remove the right of the Project: explore =
OK
25. Doly v1.1 - v1.7 (SE)
remove Trojan V1.1-V1.5 version:
these versions of the Trojan horse program on the three, the addition of two up project, the project also increased to Win.ini.
First, enter the MS-DOS mode, remove the three Trojans, but more than a Trojan V1.35 version of the file mdm.exe.
to remove all of the following:
C: WINDOWS SYSTEM tesk.sys
C: WINDOWS Start Menu Programs Startup mstesk.exe
c: Program Files MStesk.exe
c: Program Files Mdm.exe
restart Windows.
Next, open the win.ini file
find the [WINDOWS] The following load = c: windows system tesk.exe project,
air force 1 low shoes, delete the path,
真爱, change the win.ini load =
save the file.
Finally,
mens air force 1 low, modify the registry Regedit
find the following two items and delete them
HKEY_CURRENT_USER Software Microsoft Windows CurrentVersion Run
Ms tesk = exe Microsoft Windows CurrentVersion ss
this group is all the Trojan server parameters and settings, remove all the items in the ss group. Save
Close Regedit.
also open the C: AUTOEXEC.BAT file, remove
@ echo off copy c: sys.lon c: windows StartMenu Startup Items
del c: win.reg
Close Save autoexec.bat.
OK
remove Trojan V1.6 Version:
the trojan is running, will not be closed by the normal operation of 98, only RESET button. Complete removal of the following steps:
1. Open the Control Panel - Add or Remove Programs - remove the memory manager 3.0, this is the Trojans, but it will not delete Trojan EXE file.
2. DOS boot disk with 98 or (with the RESET button), the transferred C: ,
air force one 25th, edit AUTOEXEC. BAT, the following deletion:
@ echo off copy c: sys.lon c: windows startm ~ 1 programs startup mdm.exe
del c: win.reg
Save AUTOEXEC. BAT file and return to DOS,
Air Force 1 Classic Low, in C: root directory, delete the Trojan files:
del sys.lon
del windows startm ~ 1 programs startup mdm.exe
del progra ~ 1 mdm.exe
3. Out of the floppy disk to restart,
信任, enter the 98, put the c: program files directory under the memory manager to delete the directory.
remove Trojan V1.7 version:
First, open the C: AUTOEXEC.BAT file, remove
@ echo off copy c: sys.lon c: windows startm ~ 1 programs startup mdm.exe
del c: win.reg
save the autoexec.bat
off and then open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE MicroSoft Windows CurrentVersion Run
find c: windows system mdm.exe path and remove the item
click the directory to:
HKEY_USER / .Default / Software / Marabilis / ICQ / Agent / Apps /
find ; C: windows system kernal32.exe Restart Windows.
Finally, delete the following Trojan:
c: sys.lon
c: iecookie.exe
c: windows start menu programs startup mdm.exe
c : program files mdm.exe
c: windows system mdm.exe
c: windows system kernal32.exe
Note: kernal32 is A
OK
26. Donald Dick v1.52 - 1.55
remove Trojan V1.52-1.53 version:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE system CurrentControlSet Services VxD VMLDIR
remove the right of the item: StaticVxD = Clear Trojan V1.54-1.55 version:
the two versions above version with only the default file name is different from the other are the same,
the vmldir.vxd to intld.vdx can.
27. Drat v1.0 - 3.0b
steps to remove trojan:
open the registry Regedit
click on the directory to: hkey_classes_root exefile shell open command
found @ = SHELL32
find c: windows under the shell32. * File and delete it.
OK
28. Eclipse 2000
steps to remove trojan:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Run
remove the right of the Project: bybt = ; c: windows system could be anything. exe
29. Eclypse v1.0
steps to remove trojan:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Run
delete the right side of the project: Rnaapp = Rnaapp.exe
OK
30. Executer v1
steps to remove trojan:
open the registry Regedit
click on the directory to:
HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Run
in the right Find items to
off save Regedit, restart Windows
the appropriate program files to delete Trojan.
Hybrid Mode
