Friday, October 15, 2010

Step by step teach you uncover and remove Trojan horse disguised



Have been with us many years of anti-virus software, changing the face of viruses and Trojans, they seem very "thin", then it is almost hard to deportation, and some even the existence of viruses and Trojans can not find, let alone how to Clear. So sometimes use manual inspection and removal of viruses, or necessary, this in order to disguise the process as a system of Wmiprvse.exe Trojan, for example, to remove the Trojan to do its step by step explanation.

Author to the usual one day, hold down the keyboard "Ctrl + Alt + Del" key, the "Task Manager" to open, and cut into to the "process" tab. But today is different from the past, from the "process" tab, but suddenly discovered one more Wmiprvse.exe process. Baidu was searched using the relevant information about Wmiprvse.exe process, given the answer is wmiprvse.exe is a part of the operating system Microsoft Windows. Procedures for WMI operations through the WinMgmt.exe, this program running on your system, it is very important.

See here, I believe we share the same views with the author, feel that this is a normal safety procedure process, so I have not taken seriously, they began their gaming "career", but did not last long before the computer started Automatic re-start, and later off the restart several times. In the absence of any objects of suspicion Department, I choose to use the system's search function to look at this sudden Wmiprvse.exe program files, the result is the same, there were two coexisting phenomena Wmiprvse.exe file (Figure 1).






A closer look and found two files the same size, but there Wmiprvse.exe file Windows2 directory, then read further the creation of two folders of time, Windows2 really reinstall the system in their own time, so two is the system directory, but not before a final clean and remove. At this point I re-open the "Task Manager" dialog box, found in systems where there are two Wmiprvse.exe process rights by different user. Then they checked the Internet to find information, which said the file is located under System32wbem file is a normal file, in other words not directly under the Wmiprvse.exe WindowsSystem32wbem deleted files is a virus file. Then the author in the "Task Manager" dialog, after the cessation of its process, but also into the process, folder, to delete the virus file. I thought the virus was thus eliminated, and before I re-start, is passed minutes later, the process of this virus appeared in the Task Manager on the.

I was under a cruel, holding rather Cuosha one, never let a virus file in the psychological, again to stop the Trojan process will Windows2 directory all the deleted files, but also in the Registry Editor, the search will phase The key value to delete, then restart the computer a bit, and then open the "Task Manager" dialog box, find Wmiprvse.exe process has gone, and the system automatically re-start up the total phenomenon also disappears, so the one true and false "Monkey King" met this remains to be seen. If you and I met as a Trojan disguised Wmiprvse.exe procedures, in accordance with this idea as virus removal, why then reinstall the program with time-consuming and laborious.







Recommended links:



From "primary school students could get title qualification" That open to



Expert Business Databases And Tools



"Black, Then It" Is Not Very "black"



John XINHUA introduction of Guangxi sugar set EAM2008



Audio Encoders Or Decoders Report



Dalian International MARITIME Expo 2006 Conference reports



MTS to MOV



RMVB To MP4



Recognition of the macro



Exhaustive Definition Of The Internet Data Center



Fireworks Produced Way Back In Effect



Vigilance "wind Downloader" Summer Lift Vitality And



Premier Genealogy



FLV to IPOD



[Other] Project2000 thematic knowledge (4)



Kai-fu Lee entrepreneurs need to have sufficient "relentless"



No comments:

Post a Comment