Two printer services Spoolsv.exe existing problem-solving methods
This is a variant of the machine dog.
Use the report or process Manager to see the following process.
Actually, these two are normal printer services, but they're already plugged into the DLL downloader by the virus.
CODE:
100-Security-Process:spoolsv.exe [Windows Print Task control program for printer ready.] ]-C:\WINDOWS\system32\spoolsv.exe
100-Security-Process:spoolsv.exe [Windows Print Task control program for printer ready.] ]-C:\WINDOWS\system32\spoolsv.exe
It is recommended to do the following in Safe mode: (If you go in there, hehe)
If you do not need a printer, please prohibit this service before ending his process. (or delete the file) and then remove the downloader generated by Userinit C:\windows\system32\ntfs.dll
Finally, change the original document of Userinit.exe, your system32 under the Userinit.exe should have been destroyed by the virus and replaced. Can from C:\windows\system32\dllcache here to find the system automatic backup Userinit.exe cover back System32 under, really did not, the proposal from a friend computer copy is also possible.
Reboot the computer, and then download the 360 installation again. (Internet Café Users please note that the restore card has been infected by the virus, should consider the problem caused by the reduction)
Tools you might use:
360 File Grinder Standalone download version: Http://dl.360safe.com/360filekiller.zip "Do not enter Safe mode using 360 of the Grinder"
Syscheck Anti-Black auxiliary tool to prevent the process from running again
Restore Windows XP userinit.exe files
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.