Page 141 - Tự Khắc Phục Máy Tính Khi Bị Vi Rút Tấn Công

CurrentVersion\RunOnceVdwqblwpvl.exe" =
"C:\WINDOWSs.system32\dwqblw[RANDOM
CHARACTERSl.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\RunOnceVdwqblwrsq.exe" =
"C:\WINDOW^system32\dwqblw[RANDOM
CHARACTERSJ.exe"
5. Khôi phục lại các giá trị mặc định sau trong Registry:
HKEY_CURRENT_USER\Software\Microsoft\Internet
ExplorerXExplorer Bars\| 1DE525ED-EF71-4119-8C3C-
1CE53I5ADA74}
HKEY_CURRENT_USER\Software\Microsoft\Internet
ExplorerXExplorer Bars\{ D04358AE-CE03-4A26-9E02-
69C4D3A5267F}
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersionXInternet SettingsXUser Agent
HKEY_CLASSES_ROOT\CLSID\{ 1DDE8A86-89D8-
4B55-A936-65C40B6A8DD0}
HKEY_CLASSES_ROOT\CLSID\{ 1DE525ED-EF71 -
4119-8C3C-1CE5315ADA74}
HKEY_CLASSES_ROOT\CLSĨD\{ 4D2D9681-C234-
47A3-B499-9CEE26FF54C2 Ị
HKEY_CLASSES_ROOT\CLSID\{7AClD6Dl-B83B-
4D77-A916-839F90216BC7}
HKEY_CLASSES_ROOT\CLSID\{D04358AE-CE03-
4A26-9F02-69C4D3 A5267F Ị
HKEY_CLASSES_RCX)T\:ashbackkorea.cashbackkorea.com
HKEY_CLASSES_ROOT\:ashbackkoreabar.cashbackkorea
HKEY_CLASSES_ROOTVashbacksys.cashbacksys.com
HKEY_CLASSES_ROOTVashbacksysbar.cashbacksys.com
HKEY_CLASSES_ROOT\mizane.mizane.com
HKEY_CLASSES_ROOTVnizanebar.mizane.com
HKEY_CLASSES_ROOT\okcashbackmall.okcashbackma
ll.com

141