Computer streaking pattern Part1

The installation of anti-virus software is denied, which affects the computer running speed. The computer is more vulnerable than viruses, and the virus is more rogue than others.

1. When the computer is started, some unwanted programs are automatically started, which slows down the computer?

1. view the startup Item: start -- run -- msconfig. The Startup tab lists the startup items. For example, fetion, MSN, and FOXMAIL can be found here.

2. view the services started by the computer: Right-click my computer-Manage-service and service nodes under the application root node. It is unnecessary to remove the listed services. For example, [Tencent Software Update Service] and [active defense] Must be manual. If you want to uninstall this service, but do not write a batch processing script, you can use the SRVINSTW. EXE tool.

3. Registry: start -- Run and enter regedit (Registry) to open HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run. Will list some boot items. If you do not know whether this startup item can be removed. You can refer to two tips: first, if it is an executable file of the EXE type, check its path. Follow this path to find a clue. Second, check the vendor of this startup Item. Generally, microsoft, idea, and so on are fine. That's average.

 

2. How can I open a hidden file on my computer?

1. Under any file directory: Tools-Folder Options-view tab, select to display all files and folders.

2 ,. If it is invalid on the basis of 1, modify the Registry: Open the registry, find "HEKY_LOCAL_MACHINE/software/microsoft/windows/currentversion/explorer/advanced/folder/hidden/". Here there are 2 primary keys nohidden, showall, set checkvalue and defaultvalue under nohidden to 2, checkvalue under showall to 1 (1 is displayed, 0 is hidden), and defaultvalue to 2. If it is still useless, delete the checkvalue under the primary key of showall, and create a new one: Right-click New-Dword Value-Name it checkvalue, and then modify its key value to 1.

 

3. Is the homepage of IE browser modified?

1. Use the browser to modify the home page. Open IE, tool -- INTERNET option. Click the XX Page. For example, the browser home page is www.baidu.com. I want to change it to www.hao123.com. I will open IE, and use the tool-INTERNET option to change www.baidu.com to www.hao123.com. Click to use the current page.

2. the shortcut IE is included with the parameter. If the method 1 does not take effect, check whether the IE you clicked is a desktop shortcut. If yes, right-click the target address on the properties and shortcuts tab. Is there a URL with parameters like "C:/Program Files/Internet Explorer/iexplore.exe" www.baidu.com? If yes, remove it ~~~

3.install dllinto svchost.exe using environment variables: I have encountered the most secret traffic flooding attacks so far. Anti-virus software is completely ineffective (doesn't it count as a virus ?). The symptoms are as follows: after the server is turned on, the task manager (ctrlw.altsf-del.exe process) automatically redirects to two hidden internetexplorer.exe processes. If you believe it is true, it is not a fake name, such as intrenetexploter.exe ). Later, I wrote a small tool wsyscheck.exe, so that I could solve this problem. This is an enhanced version of the task manager. You can view details such as the DLL called by the task. Through this small software, I switched to the automatically generated internetexplorer.exe process to access an advertisement website (I forgot the specific website! -_-). Search for this URL in the registry. No result is returned. Later, the tool wsyscheck.exe is used to separate the information of key processes such as svchost.exe and assumer.exe. It is suspicious to find a DLL in svchost.exe: hardop. dll. Because it is inserted into svchost.exe, but does not have the DLL registration information. After the DLL is removed, the computer is normal.