Release time: 2007-02-09
Symptoms of poisoning:
The CPU is 100% when you turn on the computer. If you check the process, it turns out that it occupies most of the CPU. After closing，CPUPracticality returns to normal。 But when the computer is turned on again, the CPU is 100%, which still occupies most of the CPU.
1. Install ewido to check and kill *, and found several infection targets, which have been deleted. But now
When the computer was turned on today, the CPU was 100%, which still occupied most of the CPU.
2. Install "* Clearing Expert 2006" again and checked and killed, but no * was found.
3. Check the size of system 32, and the result is as follows:
Size: 459 KB (470,016 bytes)
Essential space: 460 KB (471,040 bytes)
There should be no exception.
String 3
Solution: String 7
If this happens, unfortunately, you are 99% hitting the *. However, you might as well continue to verify. Assuming that your Windows installation disk is located in C:\ and you need to open the option to view hidden files and the option to display all file extensions in the file viewing options, then
Check your c:\Program Files\Internet Explorer\PLUGINS\ directory and you should find two files;
Check your C:\Documents and Settings\Administrator\Local Settings\Temp\ directory, and you should find this file; you can open the file with Notepad and find that an exe file is mentioned (the specific name will be different), and you will also find this exe file in that directory;
If you do not find the corresponding file in the above two steps, please change your file view to not hide the known file suffix, and search the file in the system disk to confirm whether there are indeed no relevant files.
* description
This * is mainly caused by the user installing the installer that embedded the * program. These installers are most likely some applications you download on some unknown download websites (such as some versions of qq, etc.). The * uses the installer to install the IE plug-in that is a * in the IE plug-in without reminding the user. This makes it impossible to recognize the general anti-virus and killer programs. And when you run some programs that require calling IE, the * plug-in is automatically called, so the situation described in "Symptom Description" occurs. String 3
The parent of the * is *-PSW., which may steal some of your app's accounts and passwords.
* clearance
This * can be easily removed manually, and the process is as follows:
Open "Task Manager" and run ends in "Process", and the CPU usage will drop significantly at this time;
Enter the C:\Documents and Settings\Administrator\Local Settings\Temp\ directory and delete the exe file and the bat file mentioned in this file; (It is no problem not to do this step, but it is best to clear it out)
Enter the c:\Program Files\Internet Explorer\PLUGINS\ directory and delete the file, but you cannot delete the file at this time because the system is using it. You have two ways to process the file:
Restart the machine and enter safe mode to delete it;
Although the file cannot be deleted in the current state, the file name that can be changed is, and the machine can be restarted (no need to enter safe mode) will be deleted.
After processing, if the situation in the "Symptom Description" disappears, it means that the clearance is successful. String 7
The process that is not in the XP system is the command prompt program of the XP system. It can execute some applications executed under DOS, but it will not run with the system startup. This may be a * or other virus program. It is recommended to check and kill.
1. If the installation file is on the hard disk and the system is installed from the hard disk installation directory, then change the name of the installation directory first.
2. Delete c:\winnt\system32\dllcache\,
3. Then delete system32\
4. The system will prompt that the system file is lost and requires the CD to be inserted, just ignore it.
Symptoms of poisoning:
The CPU is 100% when you turn on the computer. If you check the process, it turns out that it occupies most of the CPU. After closing，CPUPracticality returns to normal。 But when the computer is turned on again, the CPU is 100%, which still occupies most of the CPU.
1. Install ewido to check and kill *, and found several infection targets, which have been deleted. But now
When the computer was turned on today, the CPU was 100%, which still occupied most of the CPU.
2. Install "* Clearing Expert 2006" again and checked and killed, but no * was found.
3. Check the size of system 32, and the result is as follows:
Size: 459 KB (470,016 bytes)
Essential space: 460 KB (471,040 bytes)
There should be no exception.
String 3
Solution: String 7
If this happens, unfortunately, you are 99% hitting the *. However, you might as well continue to verify. Assuming that your Windows installation disk is located in C:\ and you need to open the option to view hidden files and the option to display all file extensions in the file viewing options, then
Check your c:\Program Files\Internet Explorer\PLUGINS\ directory and you should find two files;
Check your C:\Documents and Settings\Administrator\Local Settings\Temp\ directory, and you should find this file; you can open the file with Notepad and find that an exe file is mentioned (the specific name will be different), and you will also find this exe file in that directory;
If you do not find the corresponding file in the above two steps, please change your file view to not hide the known file suffix, and search the file in the system disk to confirm whether there are indeed no relevant files.
* description
This * is mainly caused by the user installing the installer that embedded the * program. These installers are most likely some applications you download on some unknown download websites (such as some versions of qq, etc.). The * uses the installer to install the IE plug-in that is a * in the IE plug-in without reminding the user. This makes it impossible to recognize the general anti-virus and killer programs. And when you run some programs that require calling IE, the * plug-in is automatically called, so the situation described in "Symptom Description" occurs. String 3
The parent of the * is *-PSW., which may steal some of your app's accounts and passwords.
* clearance
This * can be easily removed manually, and the process is as follows:
Open "Task Manager" and run ends in "Process", and the CPU usage will drop significantly at this time;
Enter the C:\Documents and Settings\Administrator\Local Settings\Temp\ directory and delete the exe file and the bat file mentioned in this file; (It is no problem not to do this step, but it is best to clear it out)
Enter the c:\Program Files\Internet Explorer\PLUGINS\ directory and delete the file, but you cannot delete the file at this time because the system is using it. You have two ways to process the file:
Restart the machine and enter safe mode to delete it;
Although the file cannot be deleted in the current state, the file name that can be changed is, and the machine can be restarted (no need to enter safe mode) will be deleted.
After processing, if the situation in the "Symptom Description" disappears, it means that the clearance is successful. String 7
The process that is not in the XP system is the command prompt program of the XP system. It can execute some applications executed under DOS, but it will not run with the system startup. This may be a * or other virus program. It is recommended to check and kill.
1. If the installation file is on the hard disk and the system is installed from the hard disk installation directory, then change the name of the installation directory first.
2. Delete c:\winnt\system32\dllcache\,
3. Then delete system32\
4. The system will prompt that the system file is lost and requires the CD to be inserted, just ignore it.