U.EXE病毒删除方法

  1,生成文件

  %windows%win32ssr.exe

  2,添加注册表启动项

  HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWin32Sr"ImagePath" = "%windows%win32ssr.exe"

  3,其它

  下载病毒%systemRoot%DOCUME~1ADMINI~1LOCALS~1Temporary Internet Files文件夹下,并拷贝到c:U.exe并执行。

  4,执行c:U.exe后生成如下病毒文件:

  %windows%system32drivers

  etpt.sys

  %windows%system32perfont.exe

  %windows%system32wbemwmiprvi.dll

  添加的注册表项:

  HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetPT"ImagePath" = "%system%drivers

  etpt.sys"

  HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesPerfFont"ImagePath" = "%system%perfont.exe"

  HKEY_CLASSES_ROOTCLSID{4DE225BF-CF59-4CFC-85F7-68B90F185355}