Hvordan Kill a Trojan Downloader
Trojan Downloader er en farlig trojaner som laster ned og installerer skadelig programvare på datamaskinen din. I tillegg kan denne parasitten laste ned andre trojanere som vil skade datasystemet ytterligere. Den trojanske kan koble til opprinnelses hackere og gi dem tilgang til din PC. Downloader kan også overvåke og keylog datamaskinen aktivitet og deretter bruke denne informasjonen til å stjele passord og kontonavn. Drep Trojan.Downloader så snart som mulig for å spare datamaskinen og beskytte private data.
Bruksanvisning
Avslutt systemprosesser
1 Trykk på "Ctrl", "Shift" og "Esc" -tastene samtidig for å starte Oppgavebehandling.
2 Klikk på "Prosesser" -kategorien i Oppgavebehandling vindu.
3 Velg "qgc37cj0ecdj.exe" fra listen over prosesser og klikk "End Process" nederst i vinduet.
4 Gjenta trinn 3 for "ss245sd.exe", "Gwang.exe", "mscorsvc.exe", "qiawpbjj.exe", "spoolc.exe", "mljul1.exe", "kqdsrngj.exe", "plite731.exe "," CPpassword.exe "," 1189461984 [1] .exe "," laf1.exe "," dmband.exe "," mc-0-0-0.exe "," b124.exe "," B122. exe "," cic.exe "," pschdprf.exe "," nwnmff_7 [1] .exe "," kybrdff_7 [1] .exe "," toolbar.exe "," tool5.exe "," tool4.exe, "" tool2.exe "," ms1.exe "og" kl1.exe. "
5 Lukk Oppgavebehandling.
Fjern registeroppføringer
6 Gå til "Start" -menyen, skriv inn "regedit" i "Start Søk" boksen og trykk "Enter" for å starte Registerredigering.
7 Klikk på "Edit" fil menyvalget i Registerredigering vinduet, velg "Finn", skriver du følgende register strengen i søkefeltet og trykk "Enter":
DABFC839-F831-3D1A-A33A-A7D4BA7C8D3D
Slett funnet registeroppføringen.
8 Gjenta trinn 2 for følgende registeroppføringer:
64463810-1dd2-11b2-b516-d12a2a9349d5
3FD348FA-3E39-43E1-B758-0834CA9FB646
4c162e7b-e5fc-4713-9034-be64a70a5c46
e903bf51-9028-452d-88e5-de69ae14a026
529a7a53-3299-4bd0-bb59-df74cc290202
31468400-8f1b-4c37-a29e-05a147c84bdf
b1697b83-5da4-48c3-9051-aa23f450a4ae
de6a503f-d346-4564-949a-9df8d20ad8d3
6f881c21-308a-4542-96e3-622c66be1b3b
f95ce9c5-6a71-4a6d-ad27-238b5ec28b7d
ca05f27f-7744-41e5-99f6-3f5b64a313b8
cd4576e2-1dd1-11b2-9019-b8cadbbbf98a
9b77af5e-8873-4714-8cb5-3b9fc5f08d3c
f9da900f-ea15-4c3f-9330-185a166f2a3e
f15def2c-9d79-4527-97eb-0249dda2b0d9
87be23cd-03f6-40ec-8e04-8763b02d24e1
bb85f221-f230-420e-943B-6d05d59d2557
e9306072-417e-43e3-81d5-369490beef7c
c2680e10-1655-4a0e-87f8-4259325a84b7
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Varsle \ bbdefaadbffd
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ gokmpqms
c4cd831b-a5e4-4763-a218-084c768dee0e
70d1de45-4297-4331-8e41-8a1dfde53b0c
13586fd0-d889-4c0a-8efd-65dc2da92cf0
0d1f1703-3863-4b91-9200-6e0ad3dc6f8f
1516CAC1-5224-0AAF-0216-5E00BBCD8CCF
9808ba7d-2638-44e4-9610-9712efc469b4
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ ercncdfl
6b45b3d0-a80a-437d-9c76-5480c682d1f2
6fcb5896-3d92-4500-a6b8-2c59e91389fa
060fad21-0e2c-4eb7-9b6a-f0f3196bfa47
1FCA4D55-F109-2968-990B-6B9A02FFFD1F
1BA51A75-AE89-E063-3687-7AF6302BED3F
a54a2d4e-9056-4503-9f1f-fce9b72e814a
8C4586DC-DB58-4B44-8AAB-72CF1EFEA458
5FFA5996-C950-1073-C115-B4C6355BB12D
c7389e12-4262-4ec3-9b2a-e19212f3977a
321dd63c-3a5f-42be-a702-0ed8c7b9a0ea
f3e74aca-0917-45ac-b6b9-025643c5ad3e
8e7ef0bb-ca5d-42ea-8e44-5003b527785c
9ecdbad4-4786-407e-Abda-6f8e9ffb4005
0068048F-386D-46D6-A212-EBC90F853F67
0599daa2-f350-4d0e-b5d9-1ff8e8e29430
d7b03c8e-1dd1-11b2-ACEC-af11156266c3
cb0ef10b-fc65-4e20-80ce-09c53091c90b
d6575335-5c45-44da-92f8-03002d3216ce
f58b2722-ea38-41a4-a0a1-b772025e59e5
61f92c80-455d-445b-a8a9-8ef53df88ea6
c2431551-17f0-4938-9012-bddeb6317ba2
e8b1d56e-6c81-4310-b73b-c18c42d73f59
1201d665-e738-4369-ac42-003dd9144e2f
795a0c3d-4ef0-4299-98a1-4d40dad1321e
5750cfd7-e2fb-4444-beb7-f7a9582909f3
12792359-f28c-4bf8-94f8-f37748308efb
13392b13-5f26-4ef5-820d-efaaaf1fb749
90b58bb7-2fae-4293-91f1-5339526a355b
7DC3167A-D0FD-401C-A1B3-C58448F0CCCA
bb252373-e804-4560-afc9-158820b2cae3
48dbc621-6c51-4ef4-9647-9678858246f3
6f3cb9ed-4728-40f2-80a0-a84bbddb361f
8f44c20b-e2c2-413f-bb54-8968540d9476
4e093368-a2f7-472f-bc6f-84ba78efcd83
59403450-1dd2-11b2-98d9-e644dabcacca
52134fce-4c2c-4458-aa18-211da5805626
688d7b7f-cc73-4a68-ad8c-3ae2c9de1d19
0eaf4179-5c06-4b4d-af44-4b02ac25aef6
f3ff1d38-4fcd-4b80-8a5d-c273716238e9
9 Slett disse registeroppføringer i tillegg:
d09cb156-760b-4938-9468-d480fb571007
89146c4c-1dd2-11b2-ADAD-c358645d6bb7
ccf4e543-bb30-432c-98f0-4d21ce7c7c8b
eaf0ddd0-0b4f-4c95-9706-cde3f9b2ed74
ed3a343c-35cd-48dd-b1b5-0abfe96f6bc9
3FED8284-5ECC-6327-8189-0710C88E2013
e1d8af49-7537-474b-b3d0-111fefd430ff
b58fb0c5-9383-4704-95b9-6b1f99bb5c07
eddfe414-341c-44d5-bcb1-e988877dcbc3
38bca804-d16b-43b6-92c0-9b1e34350dce
191bd78d-5a5c-4667-a8ac-566786e11a20
01882e74-9b04-431b-a235-2817018b28d6
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ azlcfzce
70179780-cd93-4e70-a5e9-db62df4c398b
9aa153ab-f39f-4699-bdd1-6fa3c936cac0
c84a43a3-89ac-4369-820c-3c23c827d29c
4be816b5-2e1e-4f74-98dc-2d76d34c0efb
43b0e45c-43c4-42cb-86d9-d3c2e6e92235
5196c162-6c6d-48a5-9cc9-7c41d6d943c6
6fe80bde-be8f-4547-85f5-a3df0e4ec66a
a1a31273-44b8-4071-9868-f8a30edc2839
7D6BD34C-52A3-4CC4-ADC3-A94F931018DA
E2ADC5E5-8329-494E-BEBF-4C8B26EAF961
c16faf9b-efc6-41a7-ae73-2dbcc802a7bf
3aa4deba-1206-48ae-ac8f-d59cba9fd3db
7ea00ec9-de1a-4b26-ade6-4acfc8b40fe6
1e1b43d2-0b3f-436d-b16e-d0064551cda9
ef1a6106-a462-49da-afc0-891db42202a6
4057003f-3d33-40bf-b34b-ec483cb2715e
490e53f1-0c6c-4c1c-9b7d-2f7117e4b3c0
DABCE839-3831-3818-AF3A-47D47A738D32
46f2653c-3030-42e5-8c94-fb62bddf4c5c
e848267d-a6da-4cad-b9e3-4fbdb4c8040d
dcfb195a-8918-4d7c-aaf7-3421a84b0242
509cf0a3-0665-4311-82c0-8dafd46e5559
5E8505A5-9458-442B-B58B-792A54A4A25C
566843F7-E0B5-4D9F-A083-717B0E140449
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ debgeecj
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ yopketr
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ faxccexd
SOFTWARE \ Microsoft \ Windows \ Currentversion \ ShellServiceObjectDelayLoad \ kopmet
0b4a20fb-2588-4c91-a57b-d2191eeaefb5
f08f1b3c-dcc8-4529-892a-073019dca0a1
070b50f0-d08b-4c6f-812e-9578f4307561
4511a124-01e0-4710-9975-bd4b62936594
f89a7e31-9f17-4564-8ea7-2acd8c0c37f7
DE10EC7E-9A2B-4E04-B38E-4BFF3D609394
6ba3053c-1dd2-11b2-ae7d-96c6bd596e4d
b3d7ce06-1dd1-11b2-b4cf-9f95ced31bff
dbe2bbbe-1dd1-11b2-88c2-8a421bb88069
2d69ea1a-2a75-4b44-b0b0-77acf7ea91df
2658503f-762e-4d3a-a8e9-5d73b7d9638d
ae25e6f3-60cf-41ad-afa1-74f160215d7f
8cb66675-8bbd-466c-a59d-577e4adcf62e
1c9651db-d1a5-4757-882b-b415136835ad
5ebf95b4-50ca-42f3-a00a-52b66b633757
a70ef39a-9451-4fea-bd19-f6aafe3634ff
49C50367-BA7D-4AE3-9C7E-030134CD7A73
5db8c2ef-9ed0-4d24-ad9d-9a4951e3c61c
4cc6dae6-d167-4952-aa08-0918b630284e
61667fc3-0919-41a0-b9b8-4e5dfd23c8eb
4d8aa267-8126-4e8d-b3e8-585832868c33
73805ED7-23FC-4402-AFC3-42D549323872
27d923dd-c2e7-499d-a16c-0aa63c5a57e3
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ ljjgffc
3573A527-7FAF-BCA0-73ED-9D85A727520D
4d7e0139-fc71-4ad9-9abb-5da734cf883a
d29e6cf6-5f82-4477-b9d3-1858df1cc1a8
a3586d0d-f567-4be8-9c0e-1573c075be00
7aaebf8f-a508-446d-B170-a717815fc22b
7d46ba05-6242-439f-afbd-228479985812
e8ae9c33-f9d7-43ff-bddf-0707f961c653
a3eefee9-3a79-460b-8530-97c0b7c5d27e
422e69af-0d45-4145-af18-cf0941891b3e
65ec4079-7926-4f26-9f86-6bf983ebb4b3
8e731b10-a375-4fcb-9052-643d77696a27
eb46466d-d14a-4f6f-86e7-243651edfdd9
42e2623c-5f4b-4397-bc3b-f62abe7b733a
90FDA46E-18F4-1828-DA2D-4FE6718F0AC3
81e93f80-0bdd-4dad-a9f6-904db2800540
Microsoft \ Windows NT \ Currentversion \ Winlogon \ Notify \ olddejdj
A4FC4DC5-43B0-4724-AF92-01D80504B849
699CCB54-DF3A-3CCC-D0C2-09D201ACF493
0B210029-331D-4B01-8E80-015125B9B0FB
c72f9d9a-c35b-41b4-9b07-4b845cbe4339
77852FF1-628F-419C-9FF6-1E75B86CCEDC
1E01446D-3DC7-4360-A0BF-1B6F557AE8B1
2A611133-1C57-4DFB-A05C-07EE3BFE6D34
077F45D5-5CC9-4FC8-A7BB-9D79836A6066
EA5159DF-E413-4878-8AE2-D921D41BB942
54a1e754-8661-49e0-842e-3be4a66475d9
837113F0-319A-4A75-A5D3-0ADF4640EE77
026B5895-3E8E-49A9-8EEE-B52A326DA962
64DE95E5-0A25-4DD9-A472-97BC1D419101
AntiVir
Update Checker
icq lite
msconfig
Windows-oppdatering
AntiVir
Update Checker
icq lite
msconfig
Windows-oppdatering
25A6ED23-77B4-4739-955A-8BB38613F9A8
2C1CD3D7-86AC-4068-93BC-A02304B25319
DCOM Server 25319
2C1CD3D7-86AC-4068-93BC-A02304B25319
10 Lukk Registerredigering.
Avregistrer DLLs
11 Gå til "Start" -menyen, skriv inn "cmd" i "Start Søk" boksen og trykk "Enter" for å starte kommandolinjen vinduet.
12 Type "regsvr32 / u jkkjigf.dll" i kommandolinjen vinduet og trykk "Enter" for å avregistrere DLL.
1. 3 Gjenta trinn 2 for "mspoolg.dll", "ljjgffc.dll", "urqpn.dll", "nnnol.dll", "blackbo.dll", "vtstu.dll", "movctrlnkd.dll", "qiawpbjj.dll "," movctrlswd.dll "," khfgh.dll "og" kqvgxa.dll. "
14 Lukk kommandolinjen vinduet.
Finn og Slett filer
15 Gå til "Start Meny," type "ss245sd.exe" i "Start Søk" boksen og trykk "Enter". Slett alle søkeresultater.
16 Gjenta trinn 1 for "ss245sd", "amb1avl", "Gwang.exe", "ms0653405-14619", "jkkjigf.dll", "mspoolg.dll", "mscorsvc.exe", "qiawpbjj.exe", "spoolc .exe "," 8c4187fe "," dumprep, "" ff1482e11692 "," mljul1.exe "," ljjgffc.dll "," 5424edb5 "," dwhcdglq "," 90f32b67 "," 7c970f2d "," 2629165f "," 0053c070 "," 68eb62da "," 02e224b4 "," rktqjqvq "," 12ccff32 "," vjnacnkj "," fabcvwpo "," c8347858 "," d45a08da "," 08a1bf1e "," 847a8a58 "," kqdsrngj.exe "," plite731 .exe "," urqpn.dll "," nnnol.dll "," blackbo.dll "," vtstu.dll "," movctrlnkd.dll "," qiawpbjj.dll "," 1103768a "," 6ca52554 "," 78f2a073 "," 3cc0d4a3 "," 0D-D4-40-0C-ZN "," 6887f700 "," e4e87def "," plite731 "," movctrlswd.dll "," CPpassword.exe "," khfgh.dll "," Windows Update "," AntiVir "," Update Checker "," msconfig "," KB_2874.tpk "," 1189461984 [1] .exe, "kqvgxa.dll," "ms", "laf1.exe", "dmband.exe "," mc-0-0-0.exe "," b124.exe "," b122.exe "," cic.exe "," CIC "," pschdprf.exe "," pschdprf "," nwnmff_7 [1 ] .exe "," kybrdff_7 [1] .exe "," toolbar.exe "," tool5.exe "," tool4.exe "," tool2.exe "," ms1.exe "," kl1.exe "og "qgc37cj0ecdj.exe."
17 Start datamaskinen på nytt.
Hint
- Sikkerhetskopier systemet registret før du fjerner registeroppføringer.
- Slett kun de oppførte registeroppføringer å unngå skade på operativsystemet.