The latest virus-sxs virus exclusive method, which has been infected with serious Trojans recently

Source: Internet
Author: User

[% Repeat_0 match = "/data/option" %] [% = @ title %] [% = @ count %] ticket [[% = @ percent %]
[% _ Repeat_0 %]

Sxs. EXE is a trojan virus that steals the passwords of QQ accounts. It is characteristic of being able to spread through a removable disk. The main harm of the virus is to steal QQ accounts and passwords. The virus also ends a large number of anti-virus software, reducing the security level of the system.
Symptoms of poisoning: The computer partition cannot be automatically opened by double-clicking it or it is difficult to open it. You can right-click it to open it! This is the most obvious symptom!
Solution: there are already many manual deletion methods on the Internet!
The simplest method is as follows:
1. Red belowCodeSave as *. BAT file

@ Echo off
Attrib-s-h-R % WINDIR % \ system32 \ autorun. bat
Attrib-s-h-R % WINDIR % \ system32 \ autorun. Bin
Attrib-s-h-R % WINDIR % \ system32 \ autorun. Reg
Attrib-s-h-R % WINDIR % \ system32 \ autorun.txt
Attrib-s-h-R % WINDIR % \ system32 \ autorun. vbs
Attrib-s-h-R % WINDIR % \ system32 \ autorun. wsh
Del % WINDIR % \ system32 \ autorun. BAT/Q
Del % WINDIR % \ system32 \ autorun. bin/Q
Del % WINDIR % \ system32 \ autorun. Reg/Q
Del % WINDIR % \ system32 \ autorun.txt/Q
Del % WINDIR % \ system32 \ autorun. vbs/Q
Del % WINDIR % \ system32 \ autorun. wsh/Q
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL attrib-s-h-R % d: \ autorun. reg
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL attrib-s-h-R % d: \ autorun. bat
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL attrib-s-h-R % d: \ autorun. bin
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL attrib-s-h-R % d: \ autorun.txt
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL attrib-s-h-R % d: \ autorun. wsh
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL attrib-s-h-R % d: \ autorun. vbs
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL del % d: \ autorun. vbs/Q
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL del % d: \ autorun.txt/Q
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL del % d: \ autorun. reg/Q
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL del % d: \ autorun. bin/Q
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL del % d: \ autorun. wsh/Q
For/d % d in (C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, s, T, U, V, W, X, Y, Z) do if exist % d: \ NUL del % d: \ autorun. BAT/Q
Attrib + S + H + R c: \ ntdetect. com
Reg Add "hkcu \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced"/V showsuperhidden/T REG_DWORD/D 1/F
Reg Add "HKLM \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \"/V userinit/D "C: \ windows \ system32 \ userinit.exe,"/F
Reg Delete "hkcu \ Software \ Microsoft \ Windows Script Host"/F
Reg Add "hkcu \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ CLSID \ {certificate} \ defaulticon"/V empty/T reg_expand_sz/D "% SystemRoot % \ system32 \ shell32.dll, 31 "/F
Reg Add "hkcu \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ CLSID \ {certificate} \ defaulticon"/V full/T reg_expand_sz/D "% SystemRoot % \ system32 \ shell32.dll, 32 "/F
CLS
Set/p tmp = press enter to solve the error that the partition cannot be opened by double-clicking.
@ Echo off
Title Yi Lin Zi
Color 0a
Echo. For example, if drive D cannot be opened, enter D.
Set/P input = [enter the drive letter of the partition that cannot be opened]
If/I "% input %" = "C" Goto: Special
Attrib-s-h-R % input %: \ autorun. inf
CLS
Del % input %: \ autorun. inf/Q
CLS
Reg Delete "HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run"/V svohost/F
CLS
Reg Delete "HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Hidden \ showall"/V checkedvalue/F
Rem adds the correct "show hidden and files and folders" registry key.
Reg Add "HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Hidden \ showall"/V checkedvalue/T REG_DWORD/D 1/F
CLS
Chkdsk % input %:/F/X
CLS
Set/p tmp = operation ended. Press enter to exit Program .
: Exit
Exit
: Special
Attrib-s-h-R % input %: \ autorun. inf
Del % input %: \ autorun. inf/Q
The echo operation has ended successfully. restart the system and double-click the operation.
Echo
There is also a virus in Echo. Please first disinfect. Then run the program.
Set/p tmp = the operation is complete. Press enter to exit the program.

2. Double-click the *. BAT file and follow these steps.
This method is absolutely good!
Q me directly!
I am sure I am not struggling!

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.