exe virus removal tool

confirmed Au_.exe is an integral part of the NSIs installation package, not a virus When it unloads 360safe, it does connect to port 80 of the following address 60.195.253.85 Grab the bag as follows: SOURCE Address: 10.1.5.189 Port: 1214 Destination Address: 60.195.253.85 Port: ttl:64 packetsize:64 Protocol: TCP TCP flag: ack| URG 0x02 0x04 0x05 0xAC 0x01 0x03 0x03 0x02 0x01 0x01 0x08 0x0A 0x00 0x00-0x00 0

. After confirmation, the task manager will find a strange process, hidel.exe. Although the CPU and memory occupied by it is not very large, the I/O write volume is astonishing, it seems to be a zombie, right-click it and select "Stop process" to terminate. The hard disk read/write has been restored to normal.Ii. Anti-Virus and invisible system backup toolsI have encountered a virus "C: \ Program Files \ Co

Digital certificate, is really a magical thing, can ensure that the software is not modified, can indicate the date of the release of the file, the most important, can greatly reduce the anti-virus software false positives, of course, this will be the use of trusted institutions issued certificates.It's not about applying for a certificate, it's about making your own certificate.1. Install the Windows SDKBoth the Generate certificate and the signature

Copy Code code as follows: @Echo off Color 2f Title Autorun Virus Removal Tool-by Phexon Rem Kill Process taskkill/f/im socksa.exe/im svohost.exe/im adober.exe/im ravmone.exe/im wincfgs.exe/im doc.exe/im rose.exe/im SxS . exe/im autorun.exe/im kb20060111.exe/im Tel.

Source code of pandatv exclusive tool to remove infected EXE files /*Pandatv excludes infected EXE filesBy: ww0830Create: 2007-1-7*/# Include "windows. H"# Include # Include # Include # Define testLong g_lcheckfilenumber; // file number checkedLong g_lclearfilenumber; // clear number//// Function:// Check if EXE file b

; CurrentVersion> RunFind the SVOHOST.exe, sxs.exe, or SoundMam (note that it is not a soundman, only one letter is missing) key value, there may be two, delete the key value is C: \ WINDOWS \ system32 \ SVOHOST.exe.Open notepad, copy the following code, save it as the "Orange August sxs killing tool. bat" file, and then run it!Copy codeThe Code is as follows: echo.@ Echo :::::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::::::@ Ech

: [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run]"Svcshare" = "% System % \ drivers \ spoclsv.exe" 6. modify registry settings and restore the "show all files and folders" option:[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Hidden \ SHOWALL]"CheckedValue" = dword: 000000017. Repair or reinstall anti-virus software8. Use anti-viru