Delete the virus, such as fig, fig, and thankyou.exe.

Source: Internet
Author: User
Last night, I helped another student to kill viruses. I don't know how many viruses he has. I have killed any suspicious virus. The USB flash drive virus is crazy recently.
The virus icon is the cute panda. This icon is in http://www.51fixpc.com/404.htm, and is a error redirected webpage of 51fixpc.com. I don't know if this pandatv virus has a negative impact on 51fixpc.com. If there is any adverse effect, I wonder if 51fixpc.com will file a lawsuit against the virus writer to eliminate the impact.

Spoclsv.exe. Process explorer is recommended for process management tools.
Do not double-click all hard drive USB flash drives. Use the open command in the right-click menu to open them.

Hidden Files cannot be displayed in Folder Options. Solution: change the value of checkedvalue under the HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/Explorer/advanced/folder/hidden/showall registry to 1, and be sure to confirmCheckedvalue is the DWORD Value.Instead of the string value. You can delete the checkedvalue of the string value and create another checkedvalue of the DWORD value. The value is 1.
Then select Show system files to show all hidden files.

We recommend that you use autoruns or Sreng to clear the Registry Startup items.
Clear the registration table, search for spoclsv.exe, and delete all items found.

Delete Autorun. INF and setup.exe files;
Delete C: /Windows/system32/ drivers / spoclsv.exe
C:/Windows/system32/ 802.com.exe ; this file does not know what it is, and it is suspicious to delete it.
C:/Windows/system32/ mwhkui.exe ; suspicious, deleted
C:/Documents and Settings/user name/Local Settings/temp/ wmbose.exe
C:/Documents and Settings/user name/Local Settings/temp/ thankyou.exe
C:/Documents and Settings/user name/Local Settings/temp/ ding.com ; suspicious, also deleted
and C:/Documents and Settings/user name/ scrobat_sl.exe.exe
In fact, you can delete all the files in the temp folder

ReferenceArticle:
Http://www.tongming.org/o4/u/icuit/archives/2006/117.html
Http://www.blogchinese.com/06042/205265/archives/2006/2006112715939.shtml
Http://blog.sina.com.cn/u/4b3258710100070e

-----------
I have killed more than I did at last night, but I still don't know much about it. We hope you can correct any omissions or errors.
There are several other words that I can remember on my paper. Unfortunately, I can't remember what it means. I also want to write about them: SVC, svcshare, and nyqsqc.
----------
Related Articles common file names/keywords of USB flash drive viruses

Supplement: The previous night, the "pandatv incense" was not cleared. The virus was successfully deleted after several files were deleted.
Supplement:Kingsoft drug overlordLaunched in December 28"Wuhan boys (pandatv)" killingYou can easily handle the virus. Download Page for "Wuhan boys" Virus killer
Related Articles:
The three kill soft targets the "pandatv incense" and "cordoot" viruses, as well as the earthquake-induced cable disconnection response.
File Name/keyword of common USB flash drive viruses

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.