you delete them. After the killing and scanning of the registry, we can finally breathe a sigh of relief, because the virus and its family are likely to have been brutally slaughtered by us. Once you have checked the process list again to make sure it is correct, you can restart the computer to see if the virus will attack again.
Third, the truly formidable adversary
Remember the above contents of the mi
.
——————————————————————————————————————————————
First, clear IE temporary files: Open IE point tool->internet option->internet temporary file-> point "delete Files" button-> will "delete all offline content" tick-> point "OK".
Delete the following registry key with SRE:
Repair the following registry key with SRE:
Remove the following service items with SRE:
Remote Procedure Call System (RPCs)/RPCs
Windows Systemdown/windowsdown
Delete the follo
Copy the following to Notepad, save as Pandakiller.bat, and then double-click Pandakiller.bat. This script not only has the effect of purging, but also prevents the virus from creating its associated programs again.
Also note that in order to take care of the vast majority of users, this script has been removed from the general htm,html,asp,aspx,jsp,php file, which will not cause the loss of the pages in your favorites (because it's just a shortcut),
Today, the company's computer in the virus, Kabbah and 360 can not run, because it is an XP system, so I thought of using tasklist and taskkill implementation of the deletion method, the specific method
Copy Code code as follows:
Run-->cmd.exe
First use tasklist >>list.txt to get the PID value of the virus
Then using taskkill/f/t/pid PID value,
/f is mandatory termination,
/t because the
we will often see under the various partition root directories of the hard disk " Autorun.inf"Such a file, and double-click the disk partition icon with the mouse, often can not open the corresponding partition window ; similar to the above, it is almost certain that the local computer system has been infected with the recent rampant Flash disk virus, the virus generally through the " Autorun.inf"file for p
following:
@echo off
Mode con cols=53 lines=30
Echo.
echo u disk virus *. VBS SPECIAL KILL
Echo.
Echo is antivirus, please wait ...
Echo.
Start/min Taskkill/im explorer.exe/f
Start/min Taskkill/im wscript.exe/f
If exist%systemroot%*.vbs del/a/q/f%systemroot%*.vbs Echo found VBS virus!
If exist%systemroot%system32*.vbs del/a/q/f%systemroot%system32*.vbs
echo Execution Cleanup ...
Echo.
Echo f
To remove a virus that cannot display hidden files:
Select the "Show hidden Files" option, found a U disk a file flash out immediately and disappeared, and then open the folder option, the discovery is still "do not show hidden files" option. And just found that click on the C, D and other letter icon will open a different window!
Summarize:
I, the illness Description:
1, unable to display hidden files;
to do so ). Note that RsRavMon is the anti-virus software of Rising Star and does not need to be deleted.
3. Enter msconfig in the command line, enter the system configuration program, select the "Start" tab, and remove and save the check boxes before all "MDM" items.
4. Enter the following command in the command line:
Del C: Autorun. inf/f/s/q/a delC: RavMon.exe/f/s/q/a delD: Autorun. inf/f/s/q/a delD: Ra
For example, how can I quickly remove the cmder.exe VIRUS IN THE WINXP system?
Nowadays, computers are becoming more and more highly technical, and more functions are available. Many of our economic aspects have also started to work on the Internet. Therefore, for users, the biggest fear is the computer poisoning, because once the computer is poisoned, it may crisis its own economic security and cause finan
How does the Win7 system get into PE to completely remove computer viruses? This day this small series and everyone to share the Win7 system how to enter the PE thorough removal of computer viruses, running Win7 64-bit system in the process of the most fear is encountered Trojan virus, these nasty viruses will cause computer paralysis, can not be used normally. There are many ways to clean up viruses on the
Notepad.exe is Windows comes with Notepad program, and many hackers will be stolen Trojan virus disguised as a Notepad.exe program, how to do the Notepad.exe virus specifically killed it? Let's share the notepad.exe virus removal method below. Steps: 1, use security guard software to kill the computer; 2, press Win+r Open the Run window, enter Regedit, enter t
When using a USB disk under Linux, every time you see a file like auto, it is suspected to be a virus.
But the input ls-l command found that the attribute is not completely?
The result is that it won't be erased.
After a multi-party query that the reason is that Linux can not deal with the "." End of the file. So in this place cannot be deleted.
But there is a solution.
The method is as follows:
If you are the system automatically mount a U disk
1, first put the U disk in the computer above, and then in the desktop blank right click to select a new text document, and then copy the following code to paste in;
@echo on
Taskkill/im explorer.exe/f
Taskkill/im W.exe
Start reg add hkcusoftwaremicrosoftwindowscurrentversionexploreradvanced/v showsuperhidden/t reg_dword/d 1/f
Start reg Import Kill.reg
Del c:autorun.*/f/q/as
Del%systemroot%system32autorun.*/f/q/as
Del d:autorun.*/f/q/as
Del e:autorun.*/f/q/as
Del f:autorun.*/f/q/as
De
How to remove the VBS virus completely under WIN7 environment?
What can a VBS virus do?
In the case of displaying hidden files and extensions, the USB disk and my computer have multiple file Autorun.inf and *. VBS (8-digit VBS file) All folders under the root folder become two, one is hidden, and the other is shortcuts. Sometimes the system's display of hidde
One of my operating system for Win2000 server notebook computer recently infected with the virus, I first use the relevant anti-virus software to scan the computer, scan the report as follows:
Virus Name: Hacktool
FileName: C:\winnt\system32\ntservice.exe
Action: Delete failed, quarantine failed, Access denied
How can you
The first step is to see if the MBR has an exception, and if there is a red item, the MBR has been tampered with by the virus.
(The PT automatically confirms whether there is malicious code and the MBR code is hidden and then displays red)
The second step is to click on the automatic fix to fix:
It's about 10 seconds to confirm the recovery.
Next, remove the rogue ads and shortcu
Method One, Linkinfo.dll is a kind of ARP attack virus variant, can infect whole exe. The general anti-virus software may not kill it, because if your version is not the latest version, do not update the virus library, do not know the virus file. If you install the latest version of anti-
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.