I m poisoned, who s going to help 50, I m poisoned, who s going to help

1 Rising Kill.

2 Registry Repair Tool method.

3. Antivirus in safe mode. Wait until the killing. Uninstall the corrupted software.

4. See what the virus is.

Column (1) For the first time in history, I encountered such a stubborn virus, there is no unified name, Rising is called a virus, I will call it a virus.

Manual Removal of "Virus" Method:

Do not double-click the partition disk during the following process, and use the right mouse button to open it when you need to open it.

1. Shut down the virus process.

Ctrl + Alt + Del task manager, look for sxs or svohost (not svchost, one letter apart) in the process, and end it if so.

2. Show hidden system files.

Run -regedit

hkey local machine software Microsoft Windows CurrentVersion Explorer Advanced Folder Hidden Showall, change the checkedvalue key to 1

Note here that the virus will delete the original valid dword value checkedvalue, create a new invalid string value checkedvalue, and change the key value to 0! It doesn't work for us to change this to 1. (Some virus variants will directly delete this checkedvalue, just like the following, and create a new one yourself).

Method: Delete this checkedvalue key, right-click New - DWORD Value - name it as CheckedValue, and then modify its key value to 1, so that you can choose "Show all hidden files" and "Show system files".

In the Folder - Tools - Folder option, set system files and hidden files to display.

3. Remove viruses.

Right-click on a partitioned disk to open it, see that there are two files in each disk and directory, and delete it.

4. Delete the auto-run items of the virus.

Open the registry and run -regedit

hkey_local_machine>software>microsoft>windows>currentversion>run

Find the Soundmam key, there may be two, delete the key where the key value is C: Windows System32.

Finally, delete it in the C: Windows System32 directory or.

After restarting the computer, I found that the antivirus software can be opened, and the partition disk can be opened by double-clicking.

5. Follow-up. The antivirus software real-time monitoring can be turned on, but it cannot run automatically at boot.

The easiest way to do this is to add and remove components from the antivirus software - repair, and you can do that.

2006-8-23 Supplemental update.

Use Rising registry repair tool.

Formatting, my computer is just formatted just like the virus in your computer. I don't know there's a better way.

If the security mode does not work, the virus is serious. You need to use the latest virus database of KV2007 to check and kill viruses** under DOS, and the computer will be used normally after restarting.

Clean up IE with Super Bunny

This is IE poisoned.