油漆未干

版权声明：转载时请以超链接形式标明文章原始出处和作者信息及本声明
http://live-free-or-die-hard.blogbus.com/logs/28202301.html

好像是emule上的那个假的Excel Campare工具带来的

解决办法： http://www.kreslavsky.com/2008/02/wintermsexe-hldrrrexe.html 

Go to http://www.majorgeeks.com/GMER_d5198.html and download GMER
Run the tool and when it finds wintems.exe process kill him..

1. Run regedit go to HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache and see all entries regarding “C:\WINDOWS\system32\drivers” .
2. In Explorer window Go to> tools>folder options>view and select show hidden files
3. Browse to your C:\WINDOWS\system32\drivers .. find drivers folder and try to delete all files listed in HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache
4. Scan your system with panda online scanner (the only one that actually cleans , not only detects
5. Install anti virus program, download last updates and do a full scan to your system

基本上就两步：

1 清除注册表

2 删掉病毒文件

还有两个链接可以参考：

http://forum.spywareterminator.com/Default.aspx?g=posts&t=3779

http://definitesurf.com/index.php?hl=f5&q=uggc%3A%2F%2Fxraalofc.oybtfcbg.pbz%2F2008%2F02%2Fivehf.ugzy 

2008/08/29 更新：

和我当初疑虑的一样，这个木马果然没那么容易干掉

看了这哥们的忠告，我最终重装了系统

2008/08/29再更新：

如果有人不服，可以参考这个帖子