Heroes first aid, computers there is a strange program

Users questions: In the c: * windows * system32 There are two files a2e01.exe, 4d1.dll, both modified the same, and generates a a2e01.exe process, terminate process, delete the two files, from time to time will automatically generate I suspect that the virus
Experts answer: Process file: dll or dll.dll process Location: System program name: QQ Dark Stardust program uses: Trojan program used to steal secrets of: System Process: No Background Process: is the use of networks: a hardware-related: No safe level: Low process analysis: a powerful energy stolen QQ Power, can steal all versions of QQ, QQ protection software without any impact. Virus module may also be dllz.dll so. The Wiggin worm antivirus software on it not being useful! Method One: "Viking" virus Zhuanshagongju: http: ** db.kingsoft . Com * download * 3 * 246.shtml is Chin http: ** down1.tech.sina.com.cn * download * down_contents * 1151769600 * 28441.s html Rising This special may occur after the killing machine in the EXE file is not open the case, download the following software fixes under: Exe file repair http: ** www.dougknox.com * xp * fileassoc * xp_exe_fix. zip Method 2: Manually remove the virus is generated in the windows directory dll.dll, logo1_.exe, rundl132.exe these three documents. The dll.dll into explorer.exe to complete by logo1_.exe Into. The virus will run automatically at startup by adding rundl132.exe first turn on my computer! Select Tools - Folder Options - View (shortcut key press ALT + T then O) in the "Hide protected operating system files (Recommended)" hook canceled, the "Show all files and documents Folder "is selected! 1. Press CTRL + ALT + DEL in the Task Manager to rundl132.exe, logo1_.exe end of the fall (no, you do not operate), delete the C drive the logo1_.exel and rundl132.exe (not know Where's, you can open My Computer, then press CTRL + F search rundl132.exe, logo1_.exe) 2. Because DLL.dll module is written to the explorer, so remove stubborn. But there are ways to delete, open task management of the process Out in the end explorer.exe, and then change the desktop disappeared, not afraid! Select the Task Manager's "File (F )"--" new task (run..) (N)" and then run explorer.exe the desktop on it out! Then put in the C: drive under the DLL.dl l delete (press CTRL + F to find it, then delete) 3. type regedit in the Run registry key to find: [HKEY_LOCAL_MACHINE * Software * Soft * DownloadWWW] to delete it, then press the CT RL + F to find the registry key rundl132.exe and all the keys in to remove 4. Open My Computer and then press CTRL + F search _desktop.ini, to find all _desktop.ini Delete ( Remove icon also shows that after In, do it alone and check again after turn off to see if there are)
  • This information provided by the users.Thanks!