[交流] 删除流氓软件彩信通的方法

用EWIDO可去除浏览器插件STDUP和MMSASSIST，禁用jmediaservice服务，查一遍毒会显示路径，找到那几个文件，另外搜索STDUP和ALBUS,记下路径,另外SYSTEM32下的STD.INI STDD.INI和所有楼上所说到过的文件名,最好都搜索一遍.

接着就是靠ICESWORD1.18删那些文件和注册表项.如果第一次删不掉,那就先删一些,然后重启了再删.直到全部删干净,先删文件再删注册表.如果注册表老是反复出现那几个项,就说明没有删干净文件,继续找.

注册表项是

HKLM\SOFTWARE\Classes\CLSID\{6A512BF7-EC78-4e8d-9841-6C02E8FA9838}

HKLM\SOFTWARE\Classes\CLSID\{6671A431-5C3D-463d-A7CF-5587F9B7E191}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A512BF7-EC78-4e8d-9841-6C02E8FA9838}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6671A431-5C3D-463d-A7CF-5587F9B7E191}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A512BF7-EC78-4e8d-9841-6C02E8FA9838}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6671A431-5C3D-463d-A7CF-5587F9B7E191}

HKU\S-1-5-21-57989841-1897051121-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A512BF7-EC78-4E8D-9841-6C02E8FA9838}

HKU\S-1-5-21-57989841-1897051121-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6671A431-5C3D-463d-A7CF-5587F9B7E191}