360 discovers that an unknown system executable hook is being installed

Kingsoft Cleanup Expert System Diagnostic Report.

**: hkey local machine software\microsoft windows currentversion explorer shellexecutehooks

File path: C: Windows System32 [Virus Program] series of malignant virus killing tools.

Jinshan cleanup expert.

Malware scanning.

Select all, copy, paste reports.

It's not a virus, it's a plugin, it's good to block it.

Any, not something you installed. Or 360 is safe without prompts. are forbidden.

In general, the system is normal. If you don't want to install these things, they may not be safe, and even if they are, the system will slow down if you have more of them. It's a lot. The system will get slower and slower.

If you don't move anything, you don't move anything, and you know that there is a problem.

If you are installing any software or doing something plug-in before.

It depends on your operation.

That is, there are dll files that are being added to the registry.

key items. In general, the window to the right of this key item has nothing but a "default" one.

When a new dll file is added to this key item, a prompt pops up in 360 times, because this is a sensitive key item, and many Trojan viruses are automatically loaded and run through this key item, and it will not appear in the system process after running, which is more secretive.

After the dll file is added to this key, you can't see the name of the dll file, but something like this, so the registry is not searchable in the registry after the dll key value of the virus file is written.

The key value of the window to the right of this key item can be deleted.

The unknown may be a virus, you can stop it.

Software of unknown origin. Prompt.. One is refusal.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse.

Refuse. Refuse. Refuse. Refuse.

Hooking. It doesn't have to be a virus. If there is a use to drive. There will be this prompt. For example, the protection of the game.

There are usually also those who do.

But if it's really a virus. It could be a rootkit that suggests you use Kaspersky to scan viruses.

Alternatively, you can use a tool like Windows Cleanup Assistant.

Control Panel - User Accounts and Family Safety - Add or remove user accounts.

Delete accounts other than you.

What kind of situation is it, try to update it in the security mode, and tell Yanyou if you can, hurry up and upgrade the 360 security guard to the new version of the most Henghuai, because the new version of the 360 security guard has upgraded the active defense system Zaona, which can completely intercept the attack of the virus.

Try to turn it off in the user and computer management, and then check if the computer is turned on for remote control, sharing, etc.

Are you a dual system? Mine has also thought about a similar situation, mine is a dual system, and the few thoughts are exactly the same as the boy grip to congratulate you.

The unknown account should be XP's leather grinder administrator.

It is to add a DLL add-in to the key key of the registry hkey local machine software Microsoft Windows currentversion explorer shellexecutehooks, which is launched with the explorer browser when it is booted, under normal circumstances.

The key entry is generally empty, and if there is a DLL module that wants to add to this key, it is mostly suspicious behavior, because Trojan viruses like to take this approach.

Click "Don't allow".

LS is right, I add, according to your description, it is likely that you are placing a compressed package, and you can play it by unzipping it. Jump out of a folder, drag out the files in that one, find the file after the exe drop out in it, and there can be no Chinese in the installation path of Yuri's revenge. For example, D:

Software Yuri's revenge doesn't work like this, change the path to d: Yuri and you can play.