病毒-Run a DLL as an APP
2008-10-09 08:44
363 查看
现象描述:使用U盘后系统速度明显变慢
病毒文件:rundll16.exe 、rundll.exe
清除办法:
1、将下列红色虚线中的代码复制到记事本保存后将扩展名改为.bat 并命名为1.bat,放到桌面。
-----------------------------------------------------------------------------------------------
@echo off
echo Windows Registry Editor Version 5.00>alpha.reg
echo [HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Run]>>alpha.reg
echo "Run a DLL as an App"=->>alpha.reg
echo "System"=->>alpha.reg
echo [HKEY_LOCAL_MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon]>>alpha.reg
echo "Userinit"="C://WINDOWS//system32//userinit.exe,">>alpha.reg
regedit /s alpha.reg
del /f /q alpha.reg
cls & echo 请重新启动计算机,然后运行2.bat & pause
-----------------------------------------------------------------------------------------------
2、将下列红色虚线中的代码复制到记事本保存后将扩展名改为.bat 并命名为2.bat,放到桌面。
-----------------------------------------------------------------------------------------------
@echo off
attrib -h -r -s -a %windir%/system32/rundll16.exe
attrib -h -r -s -a %windir%/system32/rundll.exe
attrib -h -r -s -a %windir%/system32/c_10083.nls
del /f /q %windir%/system32/c_10083.nls
del /f /q %windir%/system32/rundll16.exe
del /f /q %windir%/system32/rundll.exe
for %%i in (c d e f g h i j k) do del /f/q/as %%i:/autorun.inf & del /f/q/as %%i:/rundll.exe
del /f /s /q "%userprofile%/Local Settings/Temporary Internet Files/*.*"
del /f /s /q "%userprofile%/Local Settings/Temp/*.*"
del /f /s /q "%userprofile%/recent/*.*"
del /f /s /q %windir%/Prefetch/*.*
del /f /s /q %windir%/temp/*.*
cls & echo 病毒清除完毕。 & pause
-----------------------------------------------------------------------------------------------
3、运行1.bat
4、重新启动计算机,运行2.bat ,完毕。
病毒文件:rundll16.exe 、rundll.exe
清除办法:
1、将下列红色虚线中的代码复制到记事本保存后将扩展名改为.bat 并命名为1.bat,放到桌面。
-----------------------------------------------------------------------------------------------
@echo off
echo Windows Registry Editor Version 5.00>alpha.reg
echo [HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Run]>>alpha.reg
echo "Run a DLL as an App"=->>alpha.reg
echo "System"=->>alpha.reg
echo [HKEY_LOCAL_MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon]>>alpha.reg
echo "Userinit"="C://WINDOWS//system32//userinit.exe,">>alpha.reg
regedit /s alpha.reg
del /f /q alpha.reg
cls & echo 请重新启动计算机,然后运行2.bat & pause
-----------------------------------------------------------------------------------------------
2、将下列红色虚线中的代码复制到记事本保存后将扩展名改为.bat 并命名为2.bat,放到桌面。
-----------------------------------------------------------------------------------------------
@echo off
attrib -h -r -s -a %windir%/system32/rundll16.exe
attrib -h -r -s -a %windir%/system32/rundll.exe
attrib -h -r -s -a %windir%/system32/c_10083.nls
del /f /q %windir%/system32/c_10083.nls
del /f /q %windir%/system32/rundll16.exe
del /f /q %windir%/system32/rundll.exe
for %%i in (c d e f g h i j k) do del /f/q/as %%i:/autorun.inf & del /f/q/as %%i:/rundll.exe
del /f /s /q "%userprofile%/Local Settings/Temporary Internet Files/*.*"
del /f /s /q "%userprofile%/Local Settings/Temp/*.*"
del /f /s /q "%userprofile%/recent/*.*"
del /f /s /q %windir%/Prefetch/*.*
del /f /s /q %windir%/temp/*.*
cls & echo 病毒清除完毕。 & pause
-----------------------------------------------------------------------------------------------
3、运行1.bat
4、重新启动计算机,运行2.bat ,完毕。
相关文章推荐
- 病毒-Run a DLL as an APP
- Run a dll as an App提示的解决
- 关于run a dll as an app的问题
- 弹出run a dll as an app对话框&关机蓝屏的解决方法
- 数据执行保护-run a dll as an app
- app resolves to an APK archive which is not supported as a compilation dependency
- 模拟器运行出错-- Unable to run app in simulator:An error was encountered while running
- AS:Error running app: Instant Run requires 'Tools | Android | Enable ADB integration' to be enabled.
- AS:Error running app: Instant Run requires 'Tools | Android | Enable ADB integration' to be enabled.
- [Ionic] Build and Run an Ionic App from Scratch
- How to Run a Program as an Administrator in Windows 7
- yum 报错 Existing lock /var/run/yum.pid: another copy is running as pid 3404. Another app is curre 4000 ntly
- appface.dll和AccessibleMarshal.dll盗号病毒的来因
- AS:Error running app: Instant Run requires 'Tools | Android | Enable ADB integration' to be enabled.
- Run a Web Server from an iPhone App
- There was a problem getting an AppDomain to run the transformation from the host. The process cannot
- AS:Error running app: Instant Run requires 'Tools | Android | Enable ADB integration' to be enabled
- CentOS安装Chrome及Please start Google Chrome as a normal user. To run as root, you must specify an ...
- How to run Cobertura as an ant build script from eclipse
- IOS 6 越狱工具evasi0n出现问题 You must run this app as Administrator 的解决办法