/

Новости сайта Мы против Вирусов!
Правила Контакты Чтение RSS

SdFix это бесплатная программа для удаления троянов, руткитов, шпионских и других вредоносных программ. Эту утилиту создал AndyManchesta.

Несколько примеров того, что удаляет SDFix. (в том виде как их определяет HijackThis)

Трояны бэкдоры (backdoors) и ирцботы(IRCBot):

F2 – REG:system.ini: Shell=Explorer.exe %WINDIR%\accwiz.exe
F2 – REG:system.ini: Shell=Explorer.exe %WINDIR%\astra32.exe
F2 – REG:system.ini: Shell=Explorer.exe %WINDIR%\Avsynmgr.exe
F2 – REG:system.ini: Shell=Explorer.exe %WINDIR%\BTStack.exe
F2 – REG:system.ini: Shell=Explorer.exe %WINDIR%\BTTray.exe
F2 – REG:system.ini: Shell=Explorer.exe %WINDIR%\ctfmon.exe
F2 – REG:system.ini: Shell=Explorer.exe %WINDIR%\czsrv.exe
…

Трояны Ranky/Ranck:

F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\config\svchost.exe
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\etc\services.exe
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\NT\nrcs.exe
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\1.tmp
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\mbti.exe
…

Загрузчики троянов, Прокси, Бэкдоры, трояны кейлоггеры:

F2 – REG:system.ini: Shell=explorer.exe %Temp%\cryptfg.exe
F2 – REG:system.ini: Shell=Explorer.exe boot
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\alg32.exe
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\MSACCESS.exe
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\shell.exe
F2 – REG:system.ini: Shell=explorer.exe C:\WINDOWS\system\lsass.exe
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\explorer..exe
F2 – REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
…

HackerDefender:

O23 – Service: MSDN Driver (msdndr) – Unknown owner – C:\WINDOWS\system32\msdndr.pif
O23 – Service: MSDV Driver (msdvdr) – Unknown owner – C:\WINDOWS\system32\msdvdr.pif
O23 – Service: ro0 Service (ro0Srv) – Unknown owner – C:\WINDOWS\system32\ro0\ro0.exe
O23 – Service: Time Service (TIME) – Unknown owner – C:\WINDOWS\system32\(RandomName).exe

Трояны и руткит компоненты:

__oddysee.sys
asc355.sys
asc355O.sys
asc3550a.sys
asc3550o.sys
asc3550p.sys
asc3550u.sys
asc3550v.sys
backsys.sys
core.sys
…

Примечание:

  • если при запуске sdfix появляется сообщение об ошибке «The command prompt has been disabled by your administrator. Press any key to continue . . .», то в этом случае выполните следующие действия, Кликните по кнопке Пуск, далее выбрать пункт Запустить, далее введите «%systemdrive%\SDFix\apps\swreg IMPORT %systemdrive%\SDFix\apps\Enable_Command_Prompt.reg» и нажмите Enter. После этого попробуйте запустить sdfix снова.
  • если при запуске sdfix быстро выскакивает и исчезает окно командной строки (Windows XP и Windows 2000), то нужно кликнуть по кнопке Пуск, далее выбрать пункт Запустить, далее ввести «%systemdrive%\SDFix\apps\FixPath.exe /Q Reboot ». После этого попробуйте запустить sdfix снова.
  • если sdfix продалжает не запускаться, то проверьте системную переменную %comspec%. Для этого кликните правой клавишей по иконке Мой компьютер, в контекстном меню выберите пункт Свойства, далее закладку Дополнительно и внизу шелкните по кнопке Переменные среды. В нижней части появившегося окна проверьте, что значение переменной ComSpec это «%SystemRoot%\system32\cmd.exe», если это не так, то отредактируйте значение этой переменной.

Как использовать SDFix

  • Скачайте SDFix по ссылке приведенной ниже.
  • Дважды кликните по загруженному файлу и вы запустите процесс автоматической распаковки файла. Все файлы будут распакованы в %systemdrive%\SDFix, то есть в каталог SDFix на вашем системном диске (диске где находиться каталог Windows)
  • Далее перезагрузите компьютер в безопасном режиме. Зайдите в каталог SDFix и кликните дважды по файлу RunThis.bat
  • Нажмите Y для начала сканирования.
  • По окончанию сканирования ваш компьютер будет перезагружен, при последующей его загрузке будут удалены все найденные трояны, спайваре и тд.
  • По окончании удаления на экран будет выведен созданный лог файл, где будут указаны какие действия выполнила программа.

Примечание: перед началом работы sdfix делает резервную копию реестра используя программу ERUNT, что позволяет в случает необходимости сделать отмену изменений.

Скачать sdfix


Назад

Рекомендуем также:

Всего комментариев: 0

Добавить комментарий
Имя:
Код:





Опрос :)

Оцените мой сайт
[ Результаты · Архив опросов ]
Всего ответов: 8315

Друзья сайта

Шаблоны для uCoz
Поддержка шаблона

Чат

Облако тегов

Навигация по сайту

Статистика сайта

    Онлайн всего: 1
    Гостей: 1
    Пользователей: 0

Популярное

Как запустить компьютер в безопасном режиме (Safe Mode)
Как удалить PC Security Guardian вирус

Коментарии

Написал:
there were just 11 specially designated businesses allowed to offer EB-5 visas to foreign investors in exchange for their cash; today there are 117 and 88 more are applying for the status. http://www.xingqi8ok.com/ - miracurl babyliss pro Such vacations offer you the chance to get everything from the travel and accommodation to site seeing trips and activities organized prior to you going away to one of the many inclusive resorts in the USA. The second point: We really face a lotof problems in our educational system but to Solve these problems Should we replace that kind of education by a new one or should we start doing researches on how we can develop it. http://www.amalgamated-services.co.uk/ - mbt shoes What you feel about asset protection and insuranceWhat you expect if you need to make a claimYour assets and your net worthYour Car Needs Replacing After An AccidentThis is an important area of car insurance. Generally web designs comprises of innovated and graphical techniques as well as they are created to become easy approachable to the web searchers and it is done using wide understandable techniques. http://www.singing-exercises.com/ - red wing sale usually in the slightly roundabout way: "Do you have any beliefs that might prevent you from making a decision based strictly on the law?" If after learning about jury nullification you think it's a good idea: answer 'yes' and you'll be rejected. Most of the meetings held at the CFR are run under Chatham house rules meaning that the ideas discussed there may be used and spread by those present but no one is allowed to mention where those ideas came from. http://www.magionenews.it/ - outlet bottega veneta on line Some people use the property for their own holidays but this has an affect on their rental income during the year as the weeks the owner spends in the property is a rental loss. There is also an option to have decking built around the caravan to allow you to sit outside your caravan in complete luxury and enjoy the views surrounding the park; or if the weather is nice there is an opportunity to enjoy a barbecue and have a drink. http://www.monsoonpress.co.uk/ - cheap fred perry polo shirts David Cameron and Nick Clegg agree that people from other EU countries whose families remain in their home country while they work in the UK should not be able to draw British levels of child benefit.
Написал:
That kind of thinikng shows you're an expert
Написал:
This piece was a liejfacket that saved me from drowning.
Написал:
The Archos 43 Online Tablet arrives in eight gigabyte or 16 gigabyte variations, whichever a person you opt for. It is a whopping 5.3 inches, placing it on the scale of a hybrid in between a smartphone and a laptop It is so light nevertheless powerful and little ample to match inside your shirt pocket for when you are out and about. You will be excited to know that following an Android Operating System version two.two update, the tablet works so considerably additional faster! The video clip display display screen is very sharp - in truth it is a whole 32 percent much larger than an iPhone.
Was originally (and 95% of them are) aimed at Tablet PC for business travelers. They are supposed to be a substitute for a large notepad to be, you can bring it with you wherever you go without a laptop in your lap, looking great. Feedstock for the Tablet PC in the office notes (in a meeting, for example) take a lot easier. But the situation on screen writing is really that much of the improvement in writing in a notebook written in a speech at a later time. Especially that you use a function of the board of the laptop for anything else, is worth the extra money?
Decide Between A Tablet And Laptop
Tablets are built with Wi-fi as part of their programming and good laptops also have this as an established norm. Depending on the expense of the device, your ability to access a variety of different network services will vary. Some tablets cost will increase significantly if they have the ability to access telecom wi-fi such as 3G networks. Since almost all 3G and "4G" network access is very slow and increasingly burdened, there is little to distinguish either offering as significant. Wi-fi networks using local access devices like Cisco or Belkin do not favor one device over another either and both perform equally well.
Since this model has very little real estate south of the keyboard, Lenovo was only pointing a stick, such as X Series models before it. If you have never used a stick just before it was "a bit of getting used to, but once the nack it is a very precise way to control the cursor. The sensitivity is large with a wide range of possible settings in the menu of the controller. On the occasion of the mouse can move a few millimeters before independence at a time, but it is quite common with most pointing sticks on the market.
Tablet personal computers weren't initially intended as standalone systems - they had been aimed at people today searching for a secondary, extra transportable gadget. However, the gap is rapidly narrowing amongst tablets and conventional computer systems. The Asus Eee Pad, as an example, includes a unique Transformer keyboard dock which transforms the tablet right into a netbook laptop So you can use it as being a tablet when that suits (e.g. in class) but make it additional like a common laptop when that is definitely a lot more desirable - by way of example, when you're at your desk creating essays.


Read more
http://www.arcadetrainer.com/index.php?params=profile/view/533757/
http://llinks.org/members.php?profile=407843
http://moodle.epach.com.mx/user/view.php?id=63843&course=1
http://snoopas.com/profile/recess3health
http://www.tagzania.com/user/coltcall8/
Написал:
Я, вам завидую. Ваш блог намного лучше по содержанию и дизайну чем мой. Кто вам дизайн делал? http://www.alsr.ru/ - строительство микрорайона , http://ooo-grinada.ru/ - дачные дома .
http://www.arb1.ru/ - промышленное строительство , http://indapun.ru/ - ооо строительство .

© Мы против Вирусов! 2011
WiNAnTiViRuS.UcOz.OrG

  • count 88x31px
  • count 88x31px
    • Яндекс.Метрика
  • count 88x31px