Last night, I helped another student to kill viruses. I don't know how many viruses he has. I have killed any suspicious virus. The USB flash drive virus is crazy recently.
The virus icon is the cute panda. This icon is in http://www.51fixpc.com/404.htm, and is a error redirected webpage of 51fixpc.com. I don't know if this pandatv virus has a negative impact on 51fixpc.com. If there is any adverse effect, I wonder if 51fixpc.com will file a lawsuit against the virus writer to eliminate the impact.
Spoclsv.exe. Process explorer is recommended for process management tools.
Do not double-click all hard drive USB flash drives. Use the open command in the right-click menu to open them.
Hidden Files cannot be displayed in Folder Options. Solution: change the value of checkedvalue under the HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/Explorer/advanced/folder/hidden/showall registry to 1, and be sure to confirmCheckedvalue is the DWORD Value.Instead of the string value. You can delete the checkedvalue of the string value and create another checkedvalue of the DWORD value. The value is 1.
Then select Show system files to show all hidden files.
We recommend that you use autoruns or Sreng to clear the Registry Startup items.
Clear the registration table, search for spoclsv.exe, and delete all items found.
Delete Autorun. INF and setup.exe files;
Delete C: /Windows/system32/ drivers / spoclsv.exe
C:/Windows/system32/ 802.com.exe ; this file does not know what it is, and it is suspicious to delete it.
C:/Windows/system32/ mwhkui.exe ; suspicious, deleted
C:/Documents and Settings/user name/Local Settings/temp/ wmbose.exe
C:/Documents and Settings/user name/Local Settings/temp/ thankyou.exe
C:/Documents and Settings/user name/Local Settings/temp/ ding.com ; suspicious, also deleted
and C:/Documents and Settings/user name/ scrobat_sl.exe.exe
In fact, you can delete all the files in the temp folder
ReferenceArticle:
Http://www.tongming.org/o4/u/icuit/archives/2006/117.html
Http://www.blogchinese.com/06042/205265/archives/2006/2006112715939.shtml
Http://blog.sina.com.cn/u/4b3258710100070e
-----------
I have killed more than I did at last night, but I still don't know much about it. We hope you can correct any omissions or errors.
There are several other words that I can remember on my paper. Unfortunately, I can't remember what it means. I also want to write about them: SVC, svcshare, and nyqsqc.
----------
Related Articles common file names/keywords of USB flash drive viruses
Supplement: The previous night, the "pandatv incense" was not cleared. The virus was successfully deleted after several files were deleted.
Supplement:Kingsoft drug overlordLaunched in December 28"Wuhan boys (pandatv)" killingYou can easily handle the virus. Download Page for "Wuhan boys" Virus killer
Related Articles:
The three kill soft targets the "pandatv incense" and "cordoot" viruses, as well as the earthquake-induced cable disconnection response.
File Name/keyword of common USB flash drive viruses