WizYo Blog ! WizYo Sytes Net Tech Support
What a great place to share :) Here you will find flashes of brilliance caught for all the world to enjoy. .. Actually, these are brief articles describing how I fixed a problem. Every day, I find information online that helps me solve a mystery. So this is me giving back to the community. Thanks for stopping by.. and don't forget to tell your friends!

Aurora infestation knocked out fairly quickly

Using the following tools along with PSkill from SysInternals and BartPE boot CD, Aurora wasn't such a pain this time:

adkil.ini

yeaxj.exe@c:\windows
qiy.exe@c:\windows
ilsnaddr.exe@c:\windows\system32
ilsnaddr.exe@c:\windows
jfghjfgudk.exe@c:\windows
pzivl@c:\windows
refgoj.exe@c:\windows\system

adkil.bat

@echo off
if \%1\==\\ goto ch_batch
set akp=%2
set akf=%1

:ch_work
pskill %akf%
attrib -s -h -r %akp%\%akf%
del %akp%\%akf%
goto ch_end

:ch_batch
FOR /F "eol=; tokens=1,2* delims=@" %%i in (adkil.ini) do call adkil.bat "%%i" "%%j"
set akp=
set akf=
goto ch_end

:ch_end

 

 

( Spyware adware )

Monday, September 19, 2005


0 Comments:

Post a Comment

Back to top.

Home
WizYo
Sytes Net

Links
~hot~ Links


this site !

GuestBook
Guests

Free Hit Counter

Blog!

Tell a friend about Tech Support available here !

Free Phone with iTunes
- Previous -
 
- Password reset tools failing on Windows XP domain ...
 
- ForceDos isn't as forceful with SP2
 
- Best diaper rash treatment ever !
 
- Windows Server 2003 backup to tape
 
- Pure Sweet - Beverage Sugar - Extra Fine Granulated
 
- HP OfficeJet R40 loses configuration
 
- Adware launching Media Player
 
- Frozen servers courtesy of APC and Sun !
 
- Mas90 - Crystal Reports "database in use" Printing...
 
- Inaccessible or incorrect ( USB ) boot device?
 
- Search -
 

 


it's private

 

This page is powered by Blogger. Isn't yours?