马上注册成为YANBONG会员吧！
时下最热门的资讯、娱乐、贴图等分享都在这里等你发掘哦！
您需要 登录 才可以下载或查看，没有账号？注册
×
此病毒是如何传播的？看下图。
How it spread? See the picture below
HEY lol i've done a new photo album !:) Second ill find file and send you it.
Hey wanna see my new photo album?
Hey accept my photo album, Nice new pics of me and my friends and stuff and when i was young lol...
Hey just finished new photo album! :) might be a few nudes ;) lol...
hey you got a photo album? anyways heres my new photo album :) accept k?
hey man accept my new photo album.. :( made it for yah, been doing picture story of my life lol..
Resolution 删除方案（请一定要小心处理此步骤，若有差错电脑系统将有可能损坏而导致无法启动电脑）
==========
1.Choose "START", Click "RUN".
2.Type in "regedit" and click "OK"
3.Navigate to here HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
If you found "rdshost", take a paper and write down the data value, then delete it (shown in picture)
Attn: The data value of "rdshost" are different all the time, for example:{C7B4EE78-A8FB-4C16-AE1F-C1A568949825}
4.After delete, navigate to HKEY_CLASSES_ROOT\CLSID，find the code which u had written on paper just now, then delete it.
5.Restart your computer (MUST DO)
6.After restarted, nagivate to C:\windows\，find“photo album.zip” and delete it.
Attn : If your virus is image321.zip, then find image321.zip...
7.After that, nagivate to C:\windows\system32，find“rdshost.dll”and delete it（注意是DLL文件不是EXE）。
8.Restart your computer again, after restart, check again whether this files still there or not, if it is no, then your computer is free of virus already.
如果以上方法行不通，请尝试一下方法（请一定要小心处理此步骤，若有差错电脑系统将有可能损坏而导致无法启动电脑）
First variant
How to remove?
STEP 1
Delete registry entry:
HKEY_LOCAL_MACHINE\SOFTWARE\Micros oft\Windows\CurrentVersion\Run
"Volume Shadow Organizer" = "nvbsvc.exe"
STEP 2
Restart WINDOWS
STEP 3
Delete virus files:
C:\WINDOWS\system\nvbsvc.exe
%temp%\imageXX.zip (XX is random digitals, e.g. "image14.zip")
Second variation
How to remove?
STEP 1
Delete registry entry:
HKEY_LOCAL_MACHINE\SOFTWARE\Micros oft\Windows\CurrentVersion\Run
"Application Layer Browser"="abgsvc.exe"
STEP 2
Restart WINDOWS
STEP 3
Delete virus files:
%system%\abgsvc.exe
%temp%\imageXX.zip (XX is random digitals, e.g. "image22.zip")
最简单的方法就是format电脑咯！
|
