Does anyone know about this virus?

1. Registry cleanup method: first end the process in the task manager, and then start-run-regedit-find, delete the relevant key values searched, and continue to search until the search is not available.

In addition to automatic web hopping which is typically caused by malicious ** and rogue software, please install a super bunny, which has a rogue software uninstall feature.

I just use these 2 software, which can completely solve your problem.

Check with 360 Security Guard to see if it's rogue software.

Completely kill the secondary virus in the safe mode with Kaba.

That's a virus, it's clearly a Trojan horse!

This is usually a process in which the DLL of the virus file is injected into QQ, and the virus will be automatically launched with the QQ software.

Here's how to clean it up:

Step 2 After installation, open Kingsoft NetShield and click the [One-click Repair] button on the right side of the main interface.

Step 3 Click the [Process Now] button, if the process detects that there is a Trojan insertion in the QQ process, it will be detected. Restart as prompted.

After restarting, do not open QQ, uninstall QQ software, and delete the QQ folder. Then use NetShield's one-click cleanup to scan again, and then use antivirus software to check and kill all of them.

Finally, reinstalling QQ after killing the virus can solve the virus problem.

Note that 360 will intercept Kingsoft Net Shield installation, if you have 360, please uninstall 360 Security Guard first, Kingsoft Guard in the Poison Tyrant 2011 Internet Suite can completely replace 360 Security Guard"

Anti-virus in all modes.

If it doesn't work, teach you to kill him manually.

msconfig is removed from the startup under his entry.

In safe mode, put document 1 **local 1 temp down.

File deletion (** is to use the name of the account in a disorderly manner).

Filial piety - this is a variant of the "QQ Pass" of the Chasha Trojan Horse. It has added a no-kill flower program, which is generally not found out by Jinshan and Rising in general. You can only find out with the latest version of "Kaspersky".

This Trojan will modify the key value of the hidden file in the registry, and it will also destroy QQ and anti-virus programs, which is difficult to kill. The best way to do this is to kill Kaspersky and reinstall the system.