如何清除Run a DLL as an App病毒?
现象描述:防火墙提示“Run a DLL as an App访问网络”
病毒文件:rundll16.exe 、rundll.exe
清除办法:
1、将下列红色虚线中的代码复制到记事本保存后将扩展名改为.bat 并命名为1.bat,放到桌面。
---------------------------------------------------------------------------------------------------------
@echo off
echo Windows Registry Editor Version 5.00>alpha.reg
echo [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]>>alpha.reg
echo "Run a DLL as an App"=->>alpha.reg
echo "System"=->>alpha.reg
echo [HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon]>>alpha.reg
echo "Userinit"="C:\WINDOWS\system32\userinit.exe,">>alpha.reg
regedit /s alpha.reg
del /f /q alpha.reg
cls & echo 请重新启动计算机,然后运行2.bat & pause
---------------------------------------------------------------------------------------------------------
2、将下列红色虚线中的代码复制到记事本保存后将扩展名改为.bat 并命名为2.bat,放到桌面。
---------------------------------------------------------------------------------------------------------
@echo off
attrib -h -r -s -a %windir%system32rundll16.exe
attrib -h -r -s -a %windir%system32rundll.exe
attrib -h -r -s -a %windir%system32c_10083.nls
del /f /q %windir%system32c_10083.nls
del /f /q %windir%system32rundll16.exe
del /f /q %windir%system32rundll.exe
for %%i in (c d e f g h i j k) do del /f/q/as %%i:autorun.inf & del /f/q/as %%i:rundll.exe
del /f /s /q "%userprofile%Local SettingsTemporary Internet Files*.*"
del /f /s /q "%userprofile%Local SettingsTemp*.*"
del /f /s /q "%userprofile%recent*.*"
del /f /s /q %windir%Prefetch*.*
del /f /s /q %windir%temp*.*
cls & echo 病毒清除完毕。 & pause
---------------------------------------------------------------------------------------------------------
3、运行1.bat
4、重新启动计算机,运行2.bat ,完毕。
本文地址:http://www.45fan.com/dnjc/21344.html