今天找一个软件补丁的时候运行了一个exe文件。虽然已经很小心的用Symantec（最新病毒库）扫描过，但直到运行才报了一个adware的警告。一看，感染了C:\Windows\system32（我用的是Windows XP Pro SP2）。郁闷，没啥可说的，去目录里看看咯。一查，最近多了个CmdLineExt03.dll。上网搜索似乎没有太大危害。可还是很不爽啊，就像身边绑着个哑火的炸弹，谁知道会出什么事呢？继续搜索解决方法，终于获得如下代码
[code]
dim fso,wso,path,arr,i,f,virus,bad
set fso = createObject("scripting.fileSystemObject")
set wso = createObject("wScript.shell")
path = wso.expandEnvironmentStrings("%path%")
path = fso.getAbsolutePathName(void) & ";" & path
arr = split(path,chr(59))
for i = 0 to uBound(arr)
if not(arr(i) = empty)then
f = arr(i) & "\" & "CmdLineExt03.dll"
if(fso.fileExists(f))then
virus = true
msgBox"Found:" & vbNewLine & f,, "Detected CmdLineExt03.dll :-("
if(vbYes=msgBox("Do you want me to delete it ?", vbYesNo, "?"))_
then
fso.deleteFile(f)
if(fso.fileExists(f))then
exit for
else
virus = false
end if
else
exit for
end if
end if
end if
next
if not(virus)then
if(vbYes=msgBox("Done. Do you also want me to" &_
" test your PATH ?", vbYesNoCancel, ":-)"))then
for i = 1 to uBound(arr)
if not(arr(i) = empty)then
f = arr(i) & "\nul"
if not(fso.fileExists(f))then
bad = true
msgBox "Wrong system PATH:" & vbCrLf & arr(i),, ":-("
exit for
end if
end if
next
end if
end if
if (bad or virus)then
msgBox "OOPS. You should fix a problem.",, ":-("
else
msgBox "No problems. All done.",, ":-)"
end if
[/code]
怎么用呢？这个网上倒是说得不详细。首先把上面代码扔到一个文本文件里，命名为detect.vbs，然后重启电脑进安全模式。双击运行，会提示你找到了文件，是否需要删除等等。之后重启就不会产生这个文件了。
C:\WINDOWS\system32\CmdLineExt03.dll
|
|
