|
pengfei
银牌会员
积分 1218
发帖 485
注册 2006-7-21
来自 湖南.娄底
状态 离线
|
『第 16 楼』:
使用 LLM 解释/回答一下
Originally posted by bosskof at 2006-9-22 05:10:
为什么不在盘符下 del /s/a _desktop.ini ? del /?
的确, 比起先查找后删除简单得多!
Originally posted by bosskof at 2006-9-22 05:10:
Why not del /s/a _desktop.ini under the drive letter? del /?
Indeed, it's much simpler than finding and deleting first!
|
业精于勤而荒于嬉，形成于思而毁于随。 |
|
 2006-9-22 09:40 |
|
|
namejm
荣誉版主
batch fan
积分 5226
发帖 1737
注册 2006-3-10
来自 成都
状态 离线
|
『第 17 楼』:
使用 LLM 解释/回答一下
虽然可以在每个盘符下执行del语句，但是这样做就丧失了批处理自动批量处理问题的优点。
Although you can execute the del statement under each drive letter, but doing so loses the advantage of batch processing automatically and batch handling problems.
|
尺有所短，寸有所长，学好CMD没商量。
考虑问题复杂化，解决问题简洁化。 |
|
|
2006-9-22 09:49 |
|
|
JonePeng
金牌会员
Ｄ◎＄ Ｆαп
积分 4562
发帖 1883
注册 2004-1-19
来自 广东广州
状态 离线
|
『第 18 楼』:
使用 LLM 解释/回答一下
我的机子也中了这种可恶的病毒，其实 _desktop.ini 是文本文件，不可能是病毒的根源，无论用何种技巧删掉 _desktop.ini ，也不能斩草除根，真正的病毒根源在于 %windir%\rundl132.exe、Logo1_.exe、dll.dll，以及被感染的 Office 程序文件、QQ、Maxthon、千千静听、RealPlayer等，只要运行这些被感染的软件，病毒又再自我复制 _desktop.ini…… 以下是摘自网上的手工清除方法：
①结束logo1_.exel和rundl132.exe进程，删除%WinDir%的logo1_.exel和rundl132.exe；
②查找注册表键值：将其删除；
③查找注册表键值rundl132.exe将其删除；
④重启电脑，不要运行任何程序，删除C盘内的logo1_.exe、dll.dll和rundl132.exe文件；
⑤将被感染的QQ、Office系列、千千静听、RealPlayer等卸载或直接删除后，重新安装；
⑥安装上述软件时请确保安装程序无毒。本人在重新安装Office时，发现硬盘里备份的Office安装程序也被感染上病毒，只好重新找了张没有病毒的Office安装光盘安装。
⑦在安装程序时，随时打开注册表编辑器，查看
在此我补充一下，该病毒发作时还有一个特征：exe 程序被感染后，该 exe 的图标就会变花（如 ttplayer.exe），或者原本的真彩色图标变成16色图标（如 QQ.exe）。所以如果在“我的电脑”里看到某些exe图标突然有这种变化，很可能是中毒了。
My computer has also been infected with this hateful virus. In fact, _desktop.ini is a text file, and it can't be the root of the virus. No matter what techniques are used to delete _desktop.ini, it can't completely eliminate the root cause. The real virus roots are in %windir%\rundl132.exe, Logo1_.exe, dll.dll, as well as infected Office program files, QQ, Maxthon, Qianqian Jingting, RealPlayer, etc. As long as these infected software are run, the virus will self-replicate _desktop.ini again... The following is the manual removal method excerpted from the Internet:
① End the logo1_.exel and rundl132.exe processes, and delete logo1_.exel and rundl132.exe in %WinDir%;
② Find the registry key value: and delete it;
③ Find the registry key value rundl132.exe and delete it;
④ Restart the computer, do not run any programs, and delete the logo1_.exe, dll.dll, and rundl132.exe files in the C drive;
⑤ Uninstall or directly delete the infected QQ, Office series, Qianqian Jingting, RealPlayer, etc., and then reinstall them;
⑥ When installing the above software, make sure that the installation program is virus-free. When I reinstalled Office, I found that the Office installation program backed up in the hard drive was also infected with the virus, so I had to find a virus-free Office installation CD to install again.
⑦ When installing the program, always open the registry editor to check whether
Here I would like to add that there is another characteristic when this virus attacks: after an exe program is infected, the icon of this exe will become messy (such as ttplayer.exe), or the original true color icon will become a 16-color icon (such as QQ.exe). So if you see some exe icons suddenly have this change in "My Computer", it is very likely that the computer is infected with a virus.
|
－－－－＝＝＝＝≡≡≡≡ 我的至爱，永远是MSDOS！≡≡≡≡＝＝＝＝－－－－
 |
|
|
2006-9-22 10:55 |
|
|
xg911335
初级用户
积分 134
发帖 50
注册 2006-3-28
状态 离线
|
『第 19 楼』:
使用 LLM 解释/回答一下
for %%i (c d e f g h i j k l m n) do del /ash /s/q %%i:\_desktop.ini
for %%i (c d e f g h i j k l m n) do del /ash /s/q %%i:\_desktop.ini
|
|
|
2006-9-22 11:50 |
|
|
jieok3375
中级用户
积分 282
发帖 130
注册 2006-9-20
来自 广东
状态 离线
|
『第 20 楼』:
使用 LLM 解释/回答一下
唉~我的电脑也中了这个病毒，开始还以为是系统文件！
后来吧就发现打印机会自己打印，且打印的每张纸上只有
最上的有一行日期，其它什么都没有，浪费纸，我找不出
原因，就把系统GHOST了，但其它盘还是有_desktop.ini
这个文件…………
长见识了。
Alas~ my computer also got this virus. At first I thought it was a system file!
Then later I found that the printer would print by itself, and on each printed paper there was only a line of date at the top, with nothing else. It was a waste of paper. I couldn't find the reason, so I GHOSTed the system, but the _desktop.ini file was still on other disks...
Learned something new.
|
~~~~好好学习
天天向上~~~~ |
|
|
2006-10-9 00:48 |
|
|
qcqtye
初级用户
积分 26
发帖 14
注册 2006-1-14
状态 离线
|
『第 21 楼』:
使用 LLM 解释/回答一下
版主的代码和一句精简的代码我这里测试不行啊!pengfei
的可以删除.通过
The code of the moderator and a concise piece of code didn't work for me here! The one from pengfei can be deleted. Passed
|
|
|
2006-10-14 07:46 |
|
|
namejm
荣誉版主
batch fan
积分 5226
发帖 1737
注册 2006-3-10
来自 成都
状态 离线
|
『第 22 楼』:
使用 LLM 解释/回答一下
fsutil 命令必须以管理员权限运行。
The fsutil command must be run with administrator privileges.
|
尺有所短，寸有所长，学好CMD没商量。
考虑问题复杂化，解决问题简洁化。 |
|
|
2006-10-14 08:25 |
|
|
不得不爱
超级版主
我爱DOS
积分 5310
发帖 2044
注册 2005-9-26
来自 四川南充
状态 离线
|
『第 23 楼』:
使用 LLM 解释/回答一下
for %%i in (c d e f g h i j k l m n o p q r s t u v w x y z) do del /a /s /f /s/q %%i:\_desktop.ini
Last edited by qwe1234567 on 2006-10-14 at 10:19 ]
for %%i in (c d e f g h i j k l m n o p q r s t u v w x y z) do del /a /s /f /s/q %%i:\_desktop.ini
Last edited by qwe1234567 on 2006-10成-14 at 10:19 ]
|
我的网络U盘 我的网络第2个U盘
论坛软件下载链接
灵雨飘零论坛
论坛新手必读，所有人的基本行为准则
刷QQ空间人气、留言的小软件 |
|
|
2006-10-14 09:22 |
|
|
不得不爱
超级版主
我爱DOS
积分 5310
发帖 2044
注册 2005-9-26
来自 四川南充
状态 离线
|
|
|
2006-10-14 09:38 |
|
|
lxmxn
版主
积分 11386
发帖 4938
注册 2006-7-23
状态 离线
|
『第 25 楼』:
使用 LLM 解释/回答一下
Originally posted by qwe1234567 at 2006-10-14 09:22:
for %%i (c d e f g h i j k l m n o p q r s t u v w x y z) do del /a /s /f /s/q %%i:\_desktop.ini
qwe1234567版主的这个for命令好像掉了一个in吧？？
Originally posted by qwe1234567 at 2006-10-14 09:22:
for %%i (c d e f g h i j k l m n o p q r s t u v w x y z) do del /a /s /f /s/q %%i:\_desktop.ini
The for command of moderator qwe1234567 seems to be missing an "in"?
|
|
|
2006-10-14 10:09 |
|
|
不得不爱
超级版主
我爱DOS
积分 5310
发帖 2044
注册 2005-9-26
来自 四川南充
状态 离线
|
|
|
2006-10-14 10:20 |
|
|
sanhu35
初级用户
积分 31
发帖 15
注册 2006-8-18
状态 离线
|
『第 27 楼』:
使用 LLM 解释/回答一下
上面2个批处理，每个我都只看懂1点点
哎...强悍哦
The two batch files above, I only understand a little bit of each. Hey... it's powerful!
|
|
|
2006-10-25 11:08 |
|
|
regvip2008
初级用户
积分 187
发帖 87
注册 2007-10-23
状态 离线
|
『第 28 楼』:
使用 LLM 解释/回答一下
Originally posted by 3742668 at 2006-9-22 12:53 AM:
wmic datafile where "filename='desktop' and Extension='ini'" call delete /NOINTERACTIVE
版主的代码确实是相当的精悍，但是我有个疑问就是，为什么好像在有的电脑上面可以，但有的电脑上面就提示“无可以范例呢”？都是xp sp2的系统，且确实是有文件存在的！
还望高手指点一二？
Originally posted by 3742668 at 2006-9-22 12:53 AM:
wmic datafile where "filename='desktop' and Extension='ini'" call delete /NOINTERACTIVE
The moderator's code is indeed quite concise, but I have a question. Why does it seem to work on some computers but not on others, and it prompts "No applicable instances found" on some? Both are XP SP2 systems, and the file does exist!
I hope an expert can give me some pointers?
|
|
|
2008-3-5 12:42 |
|
