尝试连接远程IRC:www.onlinesci****.com
清除步骤:
下载IceSword120_cn.zip(以下简称冰刃)
IceSword120:http://www.motoyi.com/Down/Noted/200704/Down_10.shtml
1. 删除病毒创建的ShellServiceObjectDelayLoad启动方式(打开冰刃-注册表-依次找到病毒注册表选项删除即可): [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "Version1"="{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}"
[HKEY_CLASSES_ROOT\CLSID\{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}\InProcServer32] @="libweb.dll"
2. 重新启动计算机
3. 删除病毒文件(打开冰刃-文件-依次找到病毒文件删除即可): %System%\msnfix.exe %System%\libweb.dll
4. 删除%Windows%目录下病毒ZIP压缩包,如: love3.zip (包含love3.scr) Photo91.zip (包含Photo91.scr) beachpicture54.zip (包含beachpicture54.scr) secretimages23.zip (包含secretimages23.scr) DSC0343555.zip (包含DSC0343555.scr) IMG8438789.zip (包含IMG8438789.scr)
5. 删除可能存在的文件: %userprofile%\auto.txt |