jak sobie poradzić z WinProc.exe (wirus)??

[Gość: leszek]

Mks nie chce usunąć, norton nawet nie widzi. Co zrobić??

www.google.com

[Gość: piecyk gazowy]

To nie wirus. Tu masz jak się tego pozbyć:
www.procreativesystems.com/winprocess/manual/install.htm

Trzeba najzwyczajniej w świecie odinstalować.

Jak usunąć WinProc.exe TROJ_PWSIM.A

[Gość: bzykbzyk]

TROJ_PWSIM.A
------------------------------------------------------------------------------
Virus Type: Trojan
Destructive: No
Pattern file needed: 691
Scan engine needed: 6.150
Overall risk rating: Low
--------------------------------------------------------------------------------
Reported infections: Low
Damage Potential: High
Distribution Potential: Low
--------------------------------------------------------------------------------
Description:
This Torjan usually arrives as part of a self-extracting archive, along with
another application which may not be malicious. This malware attempts to steal
financial account information by logging keystrokes and mouse events.
It runs on Windows 95, 98, ME, NT, 2000 and XP.

Solution:
Terminating the Malware Program

This procedure terminates the running malware process from memory.

Open Windows Task Manager CTRL+ALT+DELETE

On Windows NT/2000/XP systems, press CTRL+SHIFT+ESC, and click the Processes
tab.

In the list of running programs*, locate the process: WINPROC.EXE

Select the malware process, then press either the End Task or the End Process
button, depending on the version of Windows on your system.
To check if the malware process has been terminated, close Task Manager, and
then open it again.

Close Task Manager.

*NOTE: On systems running Windows 95/98/ME, Windows Task Manager may not show
certain processes. You may use a third party process viewer to terminate the
malware process. Otherwise, continue with the next procedure, noting additional
instructions.

--> Removing Autostart Entries from the Registry

---> Removing autostart entries from the registry prevents the malware from
executing during startup.

Open Registry Editor.
To do this, click Start>Run, type Regedit, then press Enter.

In the left panel, double-click the following:

HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Run

In the right panel, locate and delete the entry or entries:

“Logo" = "%Windows%\WINPROC.EXE"

Note: %Windows% is the default Windows folder, usually C:\Windows or C:\WinNT.

Close Registry Editor.

NOTE: If you were not able to terminate the malware process from memory as
described in the previous procedure, restart your system.

no.trendmicro-europe.com/consumer/security_info/ve_detail.php?Vname=TROJ_PWSIM.A