China DOS Union

　　① End the logo1_.exel and rundl132.exe processes, and delete logo1_.exel and rundl132.exe in %WinDir%;

　　② Find the registry key value: and delete it;

　　③ Find the registry key value rundl132.exe and delete it;

　　④ Restart the computer, do not run any programs, and delete the logo1_.exe, dll.dll, and rundl132.exe files in the C drive;

　　⑤ Uninstall or directly delete the infected QQ, Office series, Qianqian Jingting, RealPlayer, etc., and then reinstall them;

　　⑥ When installing the above software, make sure that the installation program is virus-free. When I reinstalled Office, I found that the Office installation program backed up in the hard drive was also infected with the virus, so I had to find a virus-free Office installation CD to install again.

　　⑦ When installing the program, always open the registry editor to check whether





Here I would like to add that there is another characteristic when this virus attacks: after an exe program is infected, the icon of this exe will become messy (such as ttplayer.exe), or the original true color icon will become a 16-color icon (such as QQ.exe). So if you see some exe icons suddenly have this change in "My Computer", it is very likely that the computer is infected with a virus.