With register a watch to search virus of manual and cleared computer and trojan. The friend that gets online now is increasing, have a bit among them inevitable how be on guard namely and check kill virus and baleful attack program. But, if do not take care medium virus and beside how to do without the software that reduce toxin again? Did not concern, I teach everybody easily manual and cleared Tibet today the virus in computer and trojan.
Check register a watch

Registering a watch is a lot of trojans and virus all the time " favour " parasitism place, the attention should give first before the examination registers a watch register watch backup.

1, the examination registers the HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun in the watch and HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunserveice, him unfamiliar is had to start a file automatically in examining key to be worth, patulous name is EXE commonly, remember the file name of trojan program next, be in again whole the search in registering a watch, the key value that always saw same file name is about to delete, hide to what trojan document finds in computer then the ground deletes his thoroughly. For instance " love bug " virus can be revised above the first when what carry, BO2000 trojan can be revised above the 2nd) that carries.

2, the examination registers a few in expressing HKEY_LOCAL_MACHINE and HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerMain (like Local Page) , if discover key value was revised, should change according to your judgement only go back to go. Baleful code (be like " 10 thousand beautiful cereal " ) often revise these a few.

3, the acquiesce that checks HKEY_CLASSES_ROOTinifileshellopencommand and HKEY_CLASSES_ROOTtxtfileshellopencommand to wait type of a few commonly used files a moment opens a program to whether be changed. This must change come back, the acquiesce that waits through revising.txt, .ini opens a process and a lot of virus cannot keep clear of. For example " Romeo and Juliet " , BleBla virus altered a lot of documents (include.jpg, .rar, .mp3 to wait) acquiesce opens a process.

The system that examines you configures a file

The method with actually best file of inspection system configuration is to open Windows " the system deploys utility program " (from begin menu to run Msconfig.exe) , inside you can configure Config.sys, Autoexec.bat, System.ini and Win.ini, and can choose start systematic time.

1, examination Win.ini file (in C:wIndows issues) , after opening, be in " WINDOWS " below, "Run= " and " Load= " it is a likelihood to load " trojan " the way of the program, must take care them carefully. Be in usually, whats are done not have at the back of their equality sign, if follow at the back of discovery,having method and file name is not the your familiar file that start, your computer go up in the likelihood " trojan " . Atttack QQ for instance " GOP trojan " can leave a mark here.
Previous12 Next