安铁诺Trojan-Downloader.Win32.Lipler.iml专杀

以下文件在病毒运行期间生成，然后又被病毒删除：
%Temp%\nst2.tmp
%Temp%\nst3.tmp\FavoritDE.rtf
%Temp%\nst3.tmp\FavoritEN.rtf
%Temp%\nst3.tmp\FavoritES.rtf
%Temp%\nst3.tmp\FavoritFR.rtf
%Temp%\nst3.tmp\FavoritIT.rtf
%Temp%\nst3.tmp\header_LP.bmp
%Temp%\nst3.tmp\modern-header.bmp
%Temp%\nst3.tmp\modern-wizard.bmp
%Temp%\nst3.tmp\nsDialogs.dll
%Temp%\nst3.tmp\System.dll

新建注册表项：
HKEY_LOCAL_MACHINE\SOFTWARE\Live-Player
"nums"="FGE5btCAOb"
"grpid"="2563"
"installdt"="20090904"
"dl_browser"="IE"
"dl_hp_url"="http://www.schnellsucher.com/?t=Q0909042563&s=h"
"dl_se_name"="Schnell Sucher"
"dl_se_url"="http://www.schnellsucher.com/?t=Q0909042563&s=b&keywords={searchTerms}"
"dl_se_icon"="http://www.schnellsucher.com/favicon.ico"
"_status"="ok"
"Language"="EN"
"DBVersion"="1001"
"ApplicationVersionInstall"="2001"
@="C:\\Program Files\\Live-Player"

HKEY_CURRENT_USER\Software\Live-Player
"nums"="FGE5btCAOb"
"grpid"="2563"
"installdt"="20090904"
"dl_browser"="IE"
"dl_hp_url"="http://www.schnellsucher.com/?t=Q0909042563&s=h"
"dl_se_name"="Schnell Sucher"
"dl_se_url"="http://www.schnellsucher.com/?t=Q0909042563&s=b&keywords={searchTerms}"
"dl_se_icon"="http://www.schnellsucher.com/favicon.ico"
"_status"="ok"
"Language"="EN"
"DBVersion"="1001"
"ApplicationVersionInstall"="2001"
@="C:\\Program Files\\Live-Player"

清除方法：
1.关闭dll注入的进程；

2.删除病毒文件；

3.恢复注册表。

山丽友情提示：vista系统下请使用管理员权限运行本专杀工具

>