Yahoo 发表于 24-11-2007 02:57:34

通过MSN传播的imageXX.zip等等 病毒删除方案

<b><font size="5">此病毒是如何传播的?看下图。</font></b><br><b><font size="5">How it spread? See the picture below</font></b><br><br><div style="text-align: center;"><br></div><br>HEY lol i've done a new photo album !:) Second ill find file and send you it.<br>Hey wanna see my new photo album?<br>Hey accept my photo album, Nice new pics of me and my friends and stuff and when i was young lol...<br>Hey just finished new photo album! :) might be a few nudes ;) lol...<br>hey you got a photo album? anyways heres my new photo album :) accept k?<br>hey man accept my new photo album.. :( made it for yah, been doing picture story of my life lol..<br><br><br>Resolution 删除方案<font color="#ff0000">(请一定要小心处理此步骤,若有差错电脑系统将有可能损坏而导致无法启动电脑)</font><br>==========<br><font color="blue">1.Choose "START", Click "RUN".<br></font><br>
<br><br>2.Type in "regedit" and click "OK"<br><br><br><br>3.Navigate to here<font color="blue"> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad</font><br>If you found "rdshost", take a paper and write down the data value, then delete it (shown in picture)<font color="#ff0000"></font><br><font color="blue"><a href="http://www.supergeng.com/attachment.php?aid=169&amp;noupdate=yes&amp;nothumb=yes" target="_blank"><br>http://www.supergeng.com/attachment.php?aid=169</a><br>Attn: The data value of "rdshost" are different all the time, for example:{C7B4EE78-A8FB-4C16-AE1F-C1A568949825}<br>4.After delete, navigate to HKEY_CLASSES_ROOT\CLSID</font>,find the code which u had written on paper just now, then delete it. <br><img src="http://soft.yesky.com/imagelist/2007/087/9g30883296s0.gif" alt="" border="0"><br><font color="blue">5.Restart your computer (MUST DO)</font><br><font color="blue">6.After restarted, nagivate to </font><font color="#ff0000">C:\windows\</font>,find“<b>photo album.zip</b>” and delete it.<br>Attn : If your virus is image321.zip, then find image321.zip...<br><img src="http://soft.yesky.com/imagelist/2007/087/ote7cokd6e03.gif" alt="" border="0"><br>7.After that, nagivate to<font color="blue"> C:\windows\system32</font>,find“<font color="#ff0000">rdshost.dll</font>”and delete it(<font color="#ff0000">注意是DLL文件不是EXE</font>)。<br>8.Restart your computer again, after restart, check again whether this files still there or not, if it is no, then your computer is free of virus already.<br><font color="#0000ff"></font><br><font color="#0000ff"></font><br><font color="#0000ff"></font><br><font color="#0000ff">如果以上方法行不通,请尝试一下方法</font><font color="#ff0000">(请一定要小心处理此步骤,若有差错电脑系统将有可能损坏而导致无法启动电脑)</font><br><font color="#ff0000"></font><br><font size="6">First variant<br></font><br>How to remove?<br>STEP 1<br>Delete registry entry:<br>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run<br>"Volume Shadow Organizer" = "nvbsvc.exe"<br>STEP 2<br>Restart WINDOWS<br>STEP 3<br>Delete virus files:<br>C:\WINDOWS\system\nvbsvc.exe<br>%temp%\imageXX.zip (XX is random digitals, e.g. "image14.zip")<br><font size="6">Second variation</font><br>How to remove?<br>STEP 1<br>Delete registry entry:<br>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run<br>"Application Layer Browser"="abgsvc.exe"<br>STEP 2<br>Restart WINDOWS<br>STEP 3<br>Delete virus files:<br>%system%\abgsvc.exe<br>%temp%\imageXX.zip (XX is random digitals, e.g. "image22.zip")<br>最简单的方法就是format电脑咯!<br><br>

david1987 发表于 24-11-2007 03:03:08

我是直接reinstall我的msn~:yct26

木乃伊 发表于 24-11-2007 11:47:41

我现在连MSN都开不到:yct04

不留名 发表于 27-11-2007 14:10:11

谢谢你告诉我:yct06

神仙猫 发表于 27-11-2007 14:18:15

直接用 msnwormkill 这个软件,更快。:yct57 :yct57

elanekyl 发表于 28-11-2007 00:19:04

谢谢分享~~:yct49

~【*舞*】~ 发表于 2-12-2007 14:54:10

谢谢楼主告知~~!!:yct42

chowms 发表于 2-12-2007 15:22:53

不要accept咯。。。:yct48

烦躁的女孩 发表于 3-12-2007 01:40:11

楼主,第三个step我看不到图画!
可以再放多一次吗?

Yahoo 发表于 4-12-2007 22:11:42

大家记得不要去接受,
我今天很多这些病毒kacao,
都不懂朋友们干嘛
页: [1] 2
查看完整版本: 通过MSN传播的imageXX.zip等等 病毒删除方案