复制下面内容到记事本中，保存为后缀为.bat的文件 运行
taskkill /f /im hao123.exe
del "%windir%\system32\go.bat" /q /f
del "%windir%\system32\hao123.exe" /q /f
del "%windir%\system32\hao123.zip" /q /f
del "%windir%\system32\lnternet Explorer.lnk" /q /f
rd %windir%\system32\1 /s /q
rd %windir%\system32\2 /s /q
rd %windir%\system32\3 /s /q
reg add "HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command" /ve /t REG_SZ /d "C:\Program Files\Internet Explorer\iexplore.exe" /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d about:blank /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Search Page" /t REG_SZ /d "
" /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Search Bar" /t REG_SZ /d "
" /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" /v "{871C5380-42A0-1069-A2EA-08002B30309D}" /t REG_DWORD /d "00000000" /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{871C5380-42A0-1069-A2EA-08002B30309D}" /t REG_DWORD /d "00000000" /f
reg add
"HKEY_CLASSES_ROOT\piffile" /v "IsShortcut" /f
reg add
"HKEY_CLASSES_ROOT\lnkfile" /v "IsShortcut" /f
del "%ALLUSERSPROFILE%\桌面\lnternet Explorer.lnk" /q /f
assoc .txt=txtfile
del "%ALLUSERSPROFILE%\「开始」菜单\程序\lnternet Explorer.lnk" /q /f
del "%APPDATA%\Microsoft\Internet Explorer\Quick Launch\lnternet Explorer.lnk" /q /f
assoc .txt=txtfile
REG add "HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command" /ve /t REG_SZ /d "C:\Program Files\Internet Explorer\iexplore.exe" /f
taskkill /f /im explorer.exe
taskkill /f /im IEXPLORE.EXE
rename %windir%\system32\shdoclc.dll sq.txt
rename %windir%\system32\shlos.rar shdoclc.dll
echo+127.0.0.1
>>%windir%\system32\drivers\etc\hosts
echo+127.0.0.1
>>%windir%\system32\drivers\etc\hosts
echo+127.0.0.1
>>%windir%\system32\drivers\etc\hosts
echo+127.0.0.1
>>%windir%\system32\drivers\etc\hosts
cls
start explorer
我同学刚刚中 我刚刚帮她搞掂 呵呵
给你个简单方法,用360清除下插件还有木马,在桌面点右键,点排列图标,点运行桌面清理向导,清理那个浏览器,删除新出现的文件夹.清理后再在桌面点右键点新建快捷方式,上面输入
木马在后台运行，当然和木马有关了，你改过以后开机他又自动改回来了，把这木马杀掉，如果你的杀不掉，就进安全模式下运行杀毒软件接着杀
请参考
恭喜你中毒了，你用雅虎助手试试
标签：http,www,go2000
