我部電腦中左唔知咩病毒呀!

首先入safe mode 用一d anti-virus的software掃, 再用Ad-ware 2007 scan有冇本馬, 加埋用Spybot - Search & Destroy來掃, 咁應該99%的virus 或本馬都掃到

mouse click start - run - cmd

type the following (replace ctfmons.exe with the virus program you found by pressing Ctrl-Alt-Del Task Manager Process):

taskkill /f /im cftmons.exe
del %windir%\system32\mssql.exe
del %windir%\system32\work.exe
del %windir%\system32\cftmons.exe
reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion" /v "Shell" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache /v C:\WINDOWS\system32\work.exe /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache /v C:\WINDOWS\system32\mssql.exe /f
reg delete HKEY_USERS\S-1-5-21-789336058-507921405-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache /v C:\WINDOWS\system32\work.exe /f
reg delete HKEY_USERS\S-1-5-21-789336058-507921405-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache /v C:\WINDOWS\system32\mssql.exe /f
reg delete HKEY_USERS\S-1-5-21-789336058-507921405-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun /v 1 /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun /v 1 /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v mswindws /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v wsctf.exe /f

如果電腦中沒什麼重要的資料
最好最簡單還是洗機重裝系統