From the end of 2007 to now, the robot dog has been crazy for a long time, causing serious problems for Internet cafes or computer rooms, as well as individuals.
Specific sreng log: This article is excerpted
1. First change the names of the following two files:
Quote:
c:\windows\ Change to
c:\windows\system32\changed to
2. Copy these two files from a normal machine and copy them to the corresponding directory.
3. Download the "IFEO Fastee Restoration Tool":
After decompression, run. If not, please download Kingsoft AV Terminator to fix IFEO threat.
Disconnect the network and perform the following:
4..It is recommended to use XDelBox to delete the following files:
Instructions for use: Copy all the paths to delete when deleting. Right-click in the list of files to be deleted and select "Clipboard import does not check paths". After importing, right-click on the file to be deleted and select Restart Delete immediately. The computer will restart and enter the DOS interface for deletion.
Tip: It is best to uninstall all removable storage media (including USB drive, MP3, mobile phone memory card, etc.)
Quote:
c:\documents and settings\user\local settings\temporary internet files\content.ie5\sflgts6d\pt[1].exe
c:\docume~1\user\locals~1\temp\~
c:\docume~1\user\locals~1\temp\~
c:\windows\
c:\windows\
c:\docume~1\user\locals~1\temp\tl[1
c:\docume~1\user\locals~1\temp\
c:\docume~1\user\locals~1\temp\wd[1
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\system32\daa_daa_1030.dll
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\igb_cqsj_1024.dll
c:\windows\fonts\10-e0-4c-46-96-74\system\
c:\windows\
C:\
c:\
c:\windows\system32\
c:\windows\system32\drivers\
c:\windows\system32\drivers\
c:\windows\system32\drivers\
c:\windows\
c:\windows\system32\
2. After deleting and rebooting, use SREng to repair the following items:
Start the project - Delete the following entries in the registry:
Quote:
[TBMonEx] <; C:\WINDOWS\Fonts\10-E0-4C-46-96-74\system\>
[SHAProc] <; C:\WINDOWS\>
[{002DE001-E883-4899-BD2E-1B6F926757E7}] <C:\DOCUME~1\user\LOCALS~1\Temp\>
[{e000c9e2-1517-4970-be28-e103bda7d3dd}] <C:\WINDOWS\system32\DAA_DAA_1030.dll>
[{a572576d-320f-46a8-9d3c-98d96b319d64}] <C:\WINDOWS\system32\IGB_CQSJ_1024.dll>
[{0022518C-E519-4187-ADF4-B4E313A99947}] < >
[{001ABF26-9758-4887-9755-C8761F5FDE61}] < >
[nsiuxhqqw] <>
Start the project - Service - Delete the following items of the driver:
Quote:
[msskye / msskye] <system32\drivers\>
[DeepFree Update / DeepFree Update] <\??\C:\WINDOWS\system32\drivers\>
[ATI2HDDSRV / ATI2HDDSRV] <\??\C:\WINDOWS\system32\drivers\>
System Repair-HOSTS File-Reset
5. Clean up the system temporary files and IE temporary folders
Clean Assistant or 360 Security Guard:
After downloading, scan and clean the system!
7. Finally, use Killer to scan the entire disk!
Specific sreng log: This article is excerpted
1. First change the names of the following two files:
Quote:
c:\windows\ Change to
c:\windows\system32\changed to
2. Copy these two files from a normal machine and copy them to the corresponding directory.
3. Download the "IFEO Fastee Restoration Tool":
After decompression, run. If not, please download Kingsoft AV Terminator to fix IFEO threat.
Disconnect the network and perform the following:
4..It is recommended to use XDelBox to delete the following files:
Instructions for use: Copy all the paths to delete when deleting. Right-click in the list of files to be deleted and select "Clipboard import does not check paths". After importing, right-click on the file to be deleted and select Restart Delete immediately. The computer will restart and enter the DOS interface for deletion.
Tip: It is best to uninstall all removable storage media (including USB drive, MP3, mobile phone memory card, etc.)
Quote:
c:\documents and settings\user\local settings\temporary internet files\content.ie5\sflgts6d\pt[1].exe
c:\docume~1\user\locals~1\temp\~
c:\docume~1\user\locals~1\temp\~
c:\windows\
c:\windows\
c:\docume~1\user\locals~1\temp\tl[1
c:\docume~1\user\locals~1\temp\
c:\docume~1\user\locals~1\temp\wd[1
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\system32\
c:\windows\system32\
c:\windows\
c:\windows\system32\daa_daa_1030.dll
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\
c:\windows\system32\igb_cqsj_1024.dll
c:\windows\fonts\10-e0-4c-46-96-74\system\
c:\windows\
C:\
c:\
c:\windows\system32\
c:\windows\system32\drivers\
c:\windows\system32\drivers\
c:\windows\system32\drivers\
c:\windows\
c:\windows\system32\
2. After deleting and rebooting, use SREng to repair the following items:
Start the project - Delete the following entries in the registry:
Quote:
[TBMonEx] <; C:\WINDOWS\Fonts\10-E0-4C-46-96-74\system\>
[SHAProc] <; C:\WINDOWS\>
[{002DE001-E883-4899-BD2E-1B6F926757E7}] <C:\DOCUME~1\user\LOCALS~1\Temp\>
[{e000c9e2-1517-4970-be28-e103bda7d3dd}] <C:\WINDOWS\system32\DAA_DAA_1030.dll>
[{a572576d-320f-46a8-9d3c-98d96b319d64}] <C:\WINDOWS\system32\IGB_CQSJ_1024.dll>
[{0022518C-E519-4187-ADF4-B4E313A99947}] < >
[{001ABF26-9758-4887-9755-C8761F5FDE61}] < >
[nsiuxhqqw] <>
Start the project - Service - Delete the following items of the driver:
Quote:
[msskye / msskye] <system32\drivers\>
[DeepFree Update / DeepFree Update] <\??\C:\WINDOWS\system32\drivers\>
[ATI2HDDSRV / ATI2HDDSRV] <\??\C:\WINDOWS\system32\drivers\>
System Repair-HOSTS File-Reset
5. Clean up the system temporary files and IE temporary folders
Clean Assistant or 360 Security Guard:
After downloading, scan and clean the system!
7. Finally, use Killer to scan the entire disk!