Tshem cov kab mob Win32 / Conficker worm yog cov haujlwm hnyav, kev ua tiav ntawm cov uas yuav xav tau kev paub txaus nrog lub khoos phis tawm. Nyob rau tib lub sijhawm, tus txheej txheem no tuaj yeem nqa tawm uas siv cov cuab yeej tus txheej txheem ntawm lub Windows operating system thiab tsis muaj kev koom tes ntawm cov software thib peb.
Cov Lus Qhia
Kauj ruam 1
Nyem lub khawm "Pib" los nqa cov zaub mov tseem ceeb ntawm lub system thiab nkag mus rau cov nqi services.msc hauv "Pib Tshawb Nrhiav" chaw los ua haujlwm ib ntus rau cov kev pabcuam hauv server.
Kauj ruam 2
Qhia cov kev pab cuam.msc hauv Daim Ntawv Sau Npe thiab qhib Server txuas los ntawm ob npaug.
Kauj ruam 3
Nyem lub Nres khawm thiab qhia kom meej rau Cov Nyob Hauv Qhov Pib Pib Hom Teb.
Kauj ruam 4
Nyem rau "Thov" khawm kom paub meej tias nres ntawm cov kev pabcuam server thiab rov qab mus rau cov haujlwm tseem ceeb "Pib".
Kauj ruam 5
Mus rau Khiav thiab nkag mus AT / Rho Tawm / Yog nyob rau hauv Thaj Chaw Qhib kom lwv tag nrho cov haujlwm autorun tsim.
Kauj Ruam 6
Nias Tus Ntaus Nkag mus kom paub meej tias qhov kev hloov pauv raug xaiv thiab rov qab mus rau kab hluav taws xob hais kom ua.
Kauj Ruam 7
Nkag mus rau regedit hauv Qhov Qhib Kem thiab nyem OK txhawm rau ua kom tiav Kev Nres Nkag Kom Teem Sij Hawm Kev Ua Haujlwm.
Kauj ruam 8
Tshaj tawm HKEY_LOCAL_MACHINESystemCurrentControlSetServicesSheem lub npe sau npe thiab qhib cov ntsiab lus teb ntawm pib parameter hauv cov ntsiab lus pane ntawm cov ntawv teev npe editor window los ntawm txoj cai-nias.
Kauj Ruam 9
Mus rau Hloov thiab sau 4.
Kauj ruam 10
Nyem OK los siv cov kev xaiv uas raug xaiv thiab pib dua koj lub computer.
Kauj ruam 11
Nyem rau "Pib" khawm kom nqa cov zaub mov tseem ceeb ntawm lub system thiab mus rau "Yam khoom" kom pib cov txheej txheem rau kev tshem Win32 / Conficker nws tus kheej.
Kauj ruam 12
Nkag mus rau regedit hauv Qhib Lub thawv thiab nyem OK.
Kauj ruam 13
Nthuav cov npe sau npe ntawm HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionSvcHost thiab qhib cov ntsiab lus teb ntawm netsvcs parameter los ntawm txoj cai-nias.
Kauj ruam 14
Mus rau Kho kom raug thiab tshem tawm cov kab uas muaj lub npe ntawm qhov kev pabcuam siab phem.
Kauj ruam 15
Nyem OK rau kev lees paub qhov kev hais kom ua thiab rov qab rau Registry Editor.
Kauj ruam 16
Nthuav cov npe ntawm HKEY_LOCAL_MACHINESystemCurrentControlSetServices lub npe tseem ceeb thiab nrhiav lub npe cov kev pabcuam tsis zoo uas koj tau tshem tawm hauv kauj ruam dhau los.
Kauj ruam 17
Xaiv seem uas muaj cov kev pabcuam xav tau thiab hu rau cov ntawv qhia zaub mov ntsiab lus los ntawm txoj cai-nias ntawm nws daim teb.
Kauj ruam 18
Mus rau Cov Ntawv Tso Cai thiab nyem lub khawm Tshawb Fawb hauv SvcHost Cov Khoom Tso Cai Tso Cai.
Kauj ruam 19
Siv cov ntawv khij kab ntawv rau Inherit los ntawm niam txiv kev tso cai uas siv rau cov me nyuam cov khoom los ntawm kev ntxiv rau cov uas tau teev meej meej hauv lub qhov rai no thiab Hloov cov kev tso cai ntawm txhua tus me nyuam cov khoom uas muaj kev tso cai nyob ntawm no uas siv rau tus me nyuam cov khoom hauv Advanced Security Settings box.
Kauj ruam 20
Nias F5 txhawm rau hloov cov npe nkag thiab xa rov qab rau cov khoom siv.
21
Nthuav HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersinRun lub npe tseem ceeb thiab tshem tawm txhua lub sijhawm pib nrog rundll32.exe hauv ob qho subkey ntawm lub qhov rais thov.
22
Txheeb xyuas txhua qhov disks hauv kab ke rau Autorun.inf cov ntaub ntawv thiab tshem txhua qhov uas tsis txaus ntseeg.
23
Rov pib koj lub khoos phis tawm thiab rov qab rau cov cuab yeej kab hais kom ua.
24
Ntaus cov nqi hauv qab no:
reg.exe ntxiv
HKLMSoftwareMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL / v CheckedValue / t REG_DWORD / d 0x1 / f Tom qab ntawd nias tus sau yuam.
25
Xaiv lub Folder Options hais kom ua los ntawm Cov Cuab yeej Qhia Ntawv thiab mus rau View Tab.
26
Khij lub thawv tom ntej "Qhia cov ntaub ntawv zais thiab cov ntaub ntawv" thiab nyem OK.
27
Rov qab mus rau Registry Editor thiab ua kom daim ntawv qhia lub ntsiab lus teb ntawm tus siab phem DLL uas tau thauj khoom raws li ServiceDLL hauv kab lus ntxaws ntawm Registry Editor window.
28
Xaiv "Cov Khoom Nta" thiab mus rau "Security" tab.
29
Xaiv "Txhua Tus Neeg" thiab siv rau lub thawv kos hauv "Tag Nrho Kev Tswj" hauv kab "Tso Cai".
30
Nyem OK thiab rho tawm DLL cov ntaub ntawv nkag los ntawm tus malware.
31
Tig rau Cov Kev Hloov Yav Tom Ntej Kev Hloov Chaw (BITS), Tsis Siv Neeg Hloov Kho, Kev Tiv Thaiv Windows thiab Kev Nkag Tawm Uas Tsis Raug.
32
Rov qab mus rau cov kab hais kom ua kab thiab nkag mus rau cov nqi hauv qab no: reg.exe ntxiv
HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer / v NoDriveTypeAutoRun / t REG_DWORD / d 0xff / a Tom qab ntawd nias tus yuam sij Enter rau autorun.
33
Sau netsh interface tcp teeb ntiaj teb autotuning = li qub. Nias Tus Sau Sau yuav siv ua qhov kev hloov uas xaiv.
34
Rov qab koj lub computer.
