移除Ahnrpta.exe病毒，症狀類似疾風病毒

Ahnrpta.exe is a dangerous trojan/backdoor that can make your system slow or damage your whole system. It also locks your task manager sometimes.

There are several ways to remove this trojan.

You can remove it by downloading stopzilla or regrun or malwarebytes.

Or if you feel like removing Ahnrpta.exe manually, you can follow this steps:

* HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSI… F-882A-4526-8C08-51278EA437C1} * HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSI… F-882A-4526-8C08-51278EA437C1}\InprocSer… * HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSI… F-882A-8C08-4526-51278EA437C1}

the last part can vary a little in each computer, but the firts dozen of numbers will be the same. Delete the keys (I mean, delete the last folder for example {BB4C402F-882A-4526-8C08-51278EA437C1} don’t delete the root folders or you will completly screw up your system.

also browse to

# [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\W... entVersion\Explorer\ShellExecuteHooks] * {BB4C402F-882A-4526-8C08-51278EA437C1} = “hook dll rising”

and delete the key… be careful in this part you don’t have to delete the complete folder, in the right pane look for the “hook dll rising” part and delete that one only.

Don’t forget step 4.

You can closes the registry and go back to the task manager. New task, click browse and go to

“c:\windows\” you will find the file “AhnRpta.exe” delete it.

Now go to “C:\WINDOWS\system32″ look for the file “olhrwef” and delete it (note: I didn’t found it in my pc but this part was in the original tutorial that I followed).

Also delete the following files in that folder

afmain0.dll afmain1.dll afmain2.dll

If you can’t find these files, repeat step 5 and try again.

---