Recently his Windows 7 symantec endpoint protection has alarm LNK virus, I use 360 antivirus not fight viruses, 360 antivirus software called system patch, use symantec also completely kill the virus, but in the end the endpoint kept warning LNK virus, I may have, on the river's lake, please friends to help...

CodePudding user response:

CodePudding user response:

Computer infected 360 series high rogue software, in this case, also don't care about more than a few other viruses, direct formatting,

CodePudding user response:

CodePudding user response:

WMI script passive hands and feet,
Using Microsoft Tools WMI Tools is a very useful tool to remove WMI home page hijacking, the tool USES the core Windows management technology, provides the computer remote startup, the computer remote management functions, such as clear to look up

CodePudding user response:

CodePudding user response:

Formatting is the best way,

CodePudding user response:

Symantec light shout a thief has come, but don't point out where is the thief?

CodePudding user response:

refer to 7th floor tz_being response:

symantec shout a thief to the light, but don't point out where is the thief?

Only speak virus source is the local host

CodePudding user response:

See screenshot like virus was killed and LNK should be a shortcut to see if another executable file can view the properties of LNK check points to exe files and delete

CodePudding user response:

_ references 9 floor bath fire phoenix reply:

see screenshot like virus was killed and LNK should be a shortcut to see if another executable file can view the properties of LNK check point to exe files and delete

Yes, all is the shortcut to intercept clear information, it is not clear who produce these shortcuts, and continue to produce, a surprising number

CodePudding user response:

Is produced in a certain directory? So set the directory to read only try

CodePudding user response:

_ reference 11 floor bath fire phoenix reply:

is produced in a certain directory? So set the directory to read only try

Generally appear in the Shared directory, Shared directory is the working directory, also can't cancel the Shared

CodePudding user response:

So long still have??

CodePudding user response:

The link file should be the third party software request you get back, or unloaded, the third party software or put these link white list oh,