这毒我见过
点电脑桌面的“开始”菜单
选择“搜索-文件搜索“
查找6y.com 或大小为67k的文件.
删除
查找hdhb.dll
删除
重新设置IE为about:blank 就可以了。
完全清除
进注册表
将以下删除
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant]
"InstallDir"="C:\\WINDOWS\\srchasst\\"
"Actor"="c:\\windows\\srchasst\\chars\\rover.acs"
"UsageCount"=dword:00000005
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\ACMru]
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\ACMru\5603]
"000"="hdhb.dll"
"001"="6y.com"
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\ACMru\5604]
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips]
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl]
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa0]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa1]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa2]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa4]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa5]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa6]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa8]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\fa9]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
[HKEY_USERS\S-1-5-21-1960408961-299502267-682003330-1003\Software\Microsoft\Search Assistant\Tips\SrchAssCtl\faa]
"TimesResisted"=dword:00000000
"TimesDisplayed"=dword:00000000
当时帮朋友弄的时候
没特别按上面这个
反正注册表想得起来的地方都动了
后来就好了