请问spoclsv.exe是什么？
spoclsv.exe\u4e0d\u7528\u5168\u90e8\u91cd\u683c\u5f0f\u5316,\u636e\u8bf4\u5f88\u7b80\u5355,\u8fd8\u6709\u8fd9\u4e2a\u75c5\u6bd2\u540d\u662fspoclsv.exe,\u5b83\u53ef\u4ee5\u611f\u67d3\u5927\u90e8\u5206\u7684\u6269\u5c55\u540d\u4e3a.exe\u7684\u6587\u4ef6,\u5f53\u4f60\u70b9\u51fb\u8fd9\u4e9b\u6587\u4ef6\u65f6\u5c31\u4f1a\u4e2d\u62db.
\u9996\u5148\u628a\u8fdb\u7a0b\u4e2d\u7684spoclsv.exe\u7ed3\u675f\u6389(\u8bb0\u5f97\u8fd8\u6709\u4e00\u4e2a\u53ebrmincon.exe\u7684)
\u7136\u540e\u5728\u641c\u7d22spoclsv.exe\u628a\u5b83\u5220\u4e86,\u5982\u6709rmincon.exe\u4e5f\u4e00\u8d77\u5220\u4e86.
\u6700\u540e\u663e\u793a\u6240\u6709\u7684\u6587\u4ef6\u7684\u6269\u5c55\u540d\u4e3a.exe \u7684,\u5982\u6709\u88ab\u611f\u67d3\u7684\u6587\u4ef6\u5b83\u7684\u56fe\u6807\u90fd\u4f1a\u8fb9\u5f97\u5f88\u602a,\u628a\u5b83\u95e8\u5168\u5220\u4e86.
\u6700\u540e\u5728"\u5f00\u59cb""\u8fd0\u884c"\u4e2d\u8f93\u5165msconfig\u9009\u62e9\u91cc\u9762\u7684\u542f\u52a8,\u628a\u91cc\u9762\u7684spoclsv.exe\u7ed9\u94a9\u6389\u5c31,\u91cd\u542f\u52a8\u4e0b\u5c31\u53ef\u4ee5\u4e86.
spoclsv.exe
\u5173\u952e\u8bcd\uff1a \u75c5\u6bd2 \u6728\u9a6c \u64cd\u4f5c\u7cfb\u7edf spoclsv \u5b89\u5168
\u6709\u4e9b\u8bdd\u771f\u662f\u8bf4\u4e0d\u5f97\uff0c\u524d\u4e9b\u5929\u8fd8\u8bf4\u73b0\u5728\u7684\u75c5\u6bd2\u6ca1\u6709\u5927\u6279\u611f\u67d3 EXE \u6587\u4ef6\u7684\uff0c\u4eca\u5929\u5c31\u8ba9\u6211\u9047\u4e0a\u4e00\u4e2a\u3002\u8fdb\u7a0b spoclsv.exe \u548c\u75c5\u6bd2\u6587\u4ef6\u90fd\u5f88\u597d\u6740\uff0c\u5173\u952e\u662f\u5b83\u8fd8\u611f\u67d3\u4e86\u5927\u91cf\u7684 EXE \u6587\u4ef6\u3002
\u73b0\u8c61\uff1a
F\u76d8\u5927\u91cfEXE\u6587\u4ef6\u56fe\u6807\u90fd\u53d8\u6210\u4e86\u7535\u89c6\u673a\u82b1\u5c4f\u7684\u6837\u5b50\uff0c\u4f46\u662f\u5176\u4ed6\u76d8\uff0c\u5305\u62ecC\u76d8\u5374\u6ca1\u6709\uff0c\u6211\u60f3\u53ef\u80fd\u662f\u56e0\u4e3a\u75c5\u6bd2\u611f\u67d3\u4e8eF\u76d8\u5427\uff1b\u5982\u679c\u8fd0\u884c\u8fd9\u4e9b\u88ab\u611f\u67d3\u7684\u6587\u4ef6\uff0c\u75c5\u6bd2\u6587\u4ef6\u5c06\u88ab\u91ca\u653e\u8fd0\u884c\u3002
\u5206\u6790\uff1a
\u7528 UltraEdit \u67e5\u770b\u4e2d\u6bd2\u6587\u4ef6\uff0c\u53d1\u73b0\u662f\u75c5\u6bd2\u6346\u7ed1\u5728\u4e86\u539f\u6765\u7684\u53ef\u6267\u884c\u6587\u4ef6\u4e0a\uff0c\u6709\u4e24\u4e2aMZ\u5934\u3002
\u624b\u6740\uff1a
\u4e2d\u6bd2\u7684\u6587\u4ef6\u5927\u6982\u6709200\u4e2a\uff0c\u6211\u53ea\u80fd\u7528 UltraEdit \u9010\u4e2a\u7684\u624b\u52a8\u5206\u79bb\u75c5\u6bd2\u2026\u2026\u75c5\u6bd2\u9644\u5728 EXE \u6587\u4ef6\u7684\u524d 0x7000 \u4e2a\u5b57\u8282\uff0c\u5e76\u5728\u6587\u4ef6\u6700\u540e\u52a0\u4e0a\u4e8627\u4e2a\u5b57\u8282\u3002\u5c06\u8fd9\u4e9b\u5206\u79bb\u51fa\u6765\u540e\uff0c\u5c31\u5f97\u5230\u4e86\u5b8c\u6574\u7684\u75c5\u6bd2\u6587\u4ef6\uff0c\u5927\u5c0f 28K Bytes\uff0cSymantec \u6ca1\u6709\u62a5\u8b66\u3002\u597d\u5728\u8fd9\u4e9b\u4e2d\u6bd2\u6587\u4ef6\u90fd\u6709\u7740\u7279\u6b8a\u7684\u82b1\u5c4f\u56fe\u6807\uff0c\u5982\u679c\u662fWindows\u9ed8\u8ba4\u56fe\u6807\uff0c\u8fd8\u771f\u662f\u96be\u4ee5\u5224\u65ad\u90a3\u4e9b\u6587\u4ef6\u662f\u4e2d\u4e86\u6bd2\u7684\uff0c\u4e00\u65e6\u6709\u6ca1\u6740\u5e72\u51c0\u7684\u6587\u4ef6\u88ab\u8fd0\u884c\uff0c\u90a3\u4e48\u5c06\u91cd\u65b0\u4e2d\u6bd2\uff0c\u5e76\u4e14\u611f\u67d3\u5176\u4ed6\u6587\u4ef6\uff0c\u524d\u529f\u5c3d\u5f03\u2026\u2026\u597d\u5728\u6211\u624b\u5feb\uff0c\u603b\u5171\u6740\u4e86\u8fd1\u4e00\u4e2a\u534a\u5c0f\u65f6\u2026\u2026
\u718a\u732b\u70e7\u9999\u53d8\u79cdspoclsv.exe\u67e5\u6740
\u67e5\u6740\u65b9\u6cd5\uff1a
1. \u65ad\u5f00\u7f51\u7edc\uff08\u5fc5\u8981\uff09
2. \u7ed3\u675f\u75c5\u6bd2\u8fdb\u7a0b
%System%\drivers\spoclsv.exe
\u672c\u6b65\u9aa4\u8981\u672c\u77402\u5927\u539f\u5219\uff1a\u201c\u773c\u75be\u624b\u5feb\u3001\u611a\u516c\u79fb\u5c71\u201d\uff0c\u6709\u4e86\u8fd92\u5927\u7cbe\u795e\uff0c\u90a3\u4e48\u672c\u6b65\u9aa4\u4e5f\u5c31\u4e0d\u96be\u5b8c\u6210\u4e86\uff0c\u4e0d\u8fc7\u8fd0\u6c14\u597d\u7684\u54e5\u4eec\u513f\uff0c\u53ef\u80fd\u4f1a\u4e00\u4e0b\u641e\u5b9a\uff0c\u8fd0\u6c14\u4e0d\u597d\u7684.......
3. \u5220\u9664\u75c5\u6bd2\u6587\u4ef6\uff1a
c:\windows\system32\drivers\spoclsv.exe
\u6ce8\u610f\uff1a\u6253\u5f00C\u76d8\u8981\u53f3\u952e-\u5f00\u6253\uff0c\u8d1f\u8d23\u4ec1\u5144\u5c31\u8981\u529f\u4e8f\u4e00\u7bd1\uff0c\u91cd\u590d2\u7684\u6b65\u9aa4\u9e1f\uff0c\u4f24\u5fc3\u5427\uff01
4. \u4fee\u6539\u6ce8\u518c\u8868\u8bbe\u7f6e\uff0c\u6062\u590d\u201c\u663e\u793a\u6240\u6709\u6587\u4ef6\u548c\u6587\u4ef6\u5939\u201d\u9009\u9879\u529f\u80fd\uff1a
[Copy to clipboard]CODE:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
\u672c\u6b65\u9aa4\u9488\u5bf9\u75c5\u6bd2\u5c06\u663e\u793a\u9690\u85cf\u6587\u4ef6\u7981\u7528\u7684\u60c5\u51b5
5. \u53f3\u952e\u70b9\u51fb\u5206\u533a\u76d8\u7b26\uff0c\u70b9\u51fb\u53f3\u952e\u83dc\u5355\u4e2d\u7684\u201c\u6253\u5f00\u201d\u8fdb\u5165\u5206\u533a\u6839\u76ee\u5f55\uff0c\u5220\u9664\u6839\u76ee\u5f55\u4e0b\u7684\u6587\u4ef6\uff1a
X:\setup.exe
X:\autorun.inf
6. \u5220\u9664\u75c5\u6bd2\u521b\u5efa\u7684\u542f\u52a8\u9879\uff1a
[Copy to clipboard]CODE:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"svcshare"="%System%\drivers\spoclsv.exe"
7. \u4f7f\u7528\u4e13\u6740\u5de5\u5177\u8fdb\u884c\u5168\u76d8\u626b\u63cf\uff0c\u6e05\u9664\u6062\u590d\u88ab\u611f\u67d3\u7684exe\u6587\u4ef6
\u63a8\u8350\u4f7f\u7528\u8f6f\u4ef6\uff1aNimayaKiller
\u4e0b\u8f7d\u5730\u5740\uff1ahttp://download.rising.com.cn/zsgj/NimayaKiller.scr
\u6ce8\u610f\uff1a\u6b64\u8f6f\u4ef6\u5fc5\u987b\u4e0a\u7f51\u66f4\u65b0\u624d\u6709\u7528\uff01
\u4f30\u8ba1\u73b0\u5728\u5df2\u7ecf\u5927\u529f\u544a\u6210\uff0c\u5982\u8fd8\u662f\u6ca1\u641e\u5b9a\uff0c\u90a3\u5c31\u8981\u4f60\u52a8\u52a8\u8111\u7b4b\uff0c\u5177\u4f53\u60c5\u51b5\u5177\u4f53\u5bf9\u5f85\u54af\uff01
如果是，那么你中了熊猫烧香病毒。刚出的变种，很多杀毒软件查不出。
解决方法：
首先：把下列代码复制到记事本中：
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"TaskbarSizeMove"=dword:00000000
"TaskbarGlomming"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder]
"Type"="group"
"Text"="@shell32.dll,-30498"
"Bitmap"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,\
48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,34,00,00,\
00
"HelpID"="shell.hlp#51140"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ClassicViewState]
"Type"="checkbox"
"Text"="@shell32.dll,-30506"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="ClassicViewState"
"CheckedValue"=dword:00000000
"UncheckedValue"=dword:00000001
"DefaultValue"=dword:00000000
"HelpID"="shell.hlp#51076"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ControlPanelInMyComputer]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideMyComputerIcons"
"Text"="@shell32.dll,-30497"
"Type"="checkbox"
"ValueName"="{21EC2020-3AEA-1069-A2DD-08002B30309D}"
"CheckedValue"=dword:00000000
"UncheckedValue"=dword:00000001
"DefaultValue"=dword:00000001
"HKeyRoot"=dword:80000001
"HelpID"="shell.hlp#51150"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\DesktopProcess]
"Type"="checkbox"
"Text"="@shell32.dll,-30507"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="SeparateProcess"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000000
"HelpID"="shell.hlp#51079"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\DesktopProcess\Policy]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\DesktopProcess\Policy\SeparateProcess]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\DisableThumbCache]
"Type"="checkbox"
"Text"="@shell32.dll,-30517"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="DisableThumbnailCache"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000000
"HelpID"="shell.hlp#51155"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\FolderSizeTip]
"Type"="checkbox"
"Text"="@shell32.dll,-30514"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="FolderContentsInfoTip"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\FriendlyTree]
"Type"="checkbox"
"Text"="@shell32.dll,-30511"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="FriendlyTree"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"HelpID"="shell.hlp#51149"
"DefaultValue"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden]
"Text"="@shell32.dll,-30499"
"Type"="group"
"Bitmap"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,\
48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,34,00,00,\
00
"HelpID"="shell.hlp#51131"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="@shell32.dll,-30501"
"Type"="radio"
"CheckedValue"=dword:00000002
"ValueName"="Hidden"
"DefaultValue"=dword:00000002
"HKeyRoot"=dword:80000001
"HelpID"="shell.hlp#51104"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="@shell32.dll,-30500"
"Type"="radio"
"CheckedValue"=dword:00000001
"ValueName"="Hidden"
"DefaultValue"=dword:00000002
"HKeyRoot"=dword:80000001
"HelpID"="shell.hlp#51105"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt]
"Type"="checkbox"
"Text"="@shell32.dll,-30503"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="HideFileExt"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000001
"HelpID"="shell.hlp#51101"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\NetCrawler]
"Type"="checkbox"
"Text"="@shell32.dll,-30509"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="NoNetCrawling"
"CheckedValue"=dword:00000000
"UncheckedValue"=dword:00000001
"DefaultValue"=dword:00000000
"HelpID"="shell.hlp#51147"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\NetCrawler\Policy]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\NetCrawler\Policy\NoNetCrawling]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\PersistBrowsers]
"Type"="checkbox"
"Text"="@shell32.dll,-30513"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="PersistBrowsers"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"HelpID"="shell.hlp#51152"
"DefaultValue"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowCompColor]
"Type"="checkbox"
"Text"="@shell32.dll,-30512"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="ShowCompColor"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000001
"HelpID"="shell.hlp#51130"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowFullPath]
"Type"="checkbox"
"Text"="@shell32.dll,-30504"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CabinetState"
"ValueName"="FullPath"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000000
"HelpID"="shell.hlp#51100"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowFullPathAddress]
"Type"="checkbox"
"Text"="@shell32.dll,-30505"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CabinetState"
"ValueName"="FullPathAddress"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000001
"HelpID"="shell.hlp#51107"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowInfoTip]
"Type"="checkbox"
"Text"="@shell32.dll,-30502"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="ShowInfoTip"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"DefaultValue"=dword:00000001
"HelpID"="shell.hlp#51102"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SimpleSharing]
"Type"="checkbox"
"Text"="@shell32.dll,-30518"
"HKeyRoot"=dword:80000002
"RegPath"="System\\CurrentControlSet\\Control\\LSA"
"ValueName"="ForceGuest"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"HelpID"="shell.hlp#51154"
"DefaultValue"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden]
"Type"="checkbox"
"Text"="@shell32.dll,-30508"
"WarningIfNotDefault"="@shell32.dll,-28964"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="ShowSuperHidden"
"CheckedValue"=dword:00000000
"UncheckedValue"=dword:00000001
"DefaultValue"=dword:00000001
"HelpID"="shell.hlp#51103"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\WebViewBarricade]
"Type"="checkbox"
"Text"="@shell32.dll,-30510"
"HKeyRoot"=dword:80000001
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"ValueName"="WebViewBarricade"
"CheckedValue"=dword:00000001
"UncheckedValue"=dword:00000000
"HelpID"="shell.hlp#51148"
"DefaultValue"=dword:00000000
然后保存为XXX.reg(XXX可以为任何字母，保存到桌面上)。然后双击该文件确定加入注册表。
接下来，打开一个文件夹，菜单中——工具——文件夹选项。选取查看标签，然后选择“显示所有（隐藏）文件和文件夹”。如果这时候发现每个磁盘的根目录下有熊猫烧香的图标那么表示你已经中了病毒，手动清楚很麻烦，因为所有的exe文件都有可能被感染。现在还没有杀毒软件能够查杀该种病毒，我现在唯一能够查杀该种病毒的就是“超级巡警”(到http://dswlab.com下载)。然后用该软件把整个硬盘杀一遍搞定。
有问题联系我，QQ1777753968 MSN或者EMAIL:[email protected]
它可以感染大部分的扩展名为.exe的文件,当你点击这些文件时就会中招.
首先把进程中的spoclsv.exe结束掉(记得还有一个叫rmincon.exe的)
然后在搜索spoclsv.exe把它删了,如有rmincon.exe也一起删了.
最后显示所有的文件的扩展名为.exe 的,如有被感染的文件它的图标都会边得很怪,把它门全删了.
最后在"开始""运行"中输入msconfig选择里面的启动,把里面的spoclsv.exe给钩掉就,重启动下就可以了.
是伪装打印机程序”spoolsv”的一个病毒吧！
绛旓細鐔婄尗鐑ч鈥濆凡琛嶇敓鍑轰笂鐧句釜鍙樼鐥呮瘨锛屾讳綋鍒嗕负鍥涘ぇ绫汇傚彉绉1锛屽氨鏄疐uckJacks.exe杩涚▼锛屽皢鑷韩澶嶅埗鍒扮郴缁熸枃浠跺す锛岀劧鍚庢劅鏌撴枃浠跺す涓殑.exe鏂囦欢锛屽皢鍥炬爣鏀逛负鈥滅唺鐚儳棣欌濄傚彉绉2锛屽氨鏄spoclsv.exe杩涚▼锛屾劅鏌撴椂鍦–鐩樻牴鐩綍涓嬬敓鎴愭劅鏌撴爣璁版枃浠讹紝灏嗗浘鏍囨敼涓衡滅唺鐚儳棣欌濄傚彉绉3锛屼笉鍐嶆劅鏌撶敤鎴风郴缁熶腑鐨.exe鏂囦欢...
绛旓細姣忔鎴戝弻鍑绘湰鍦扮鐩樻墦寮鏃跺氨浼氬嚭鐜spoclsv.exe閬囧埌闂闇瑕佸叧闂,鎴戝彧鑳界敤鍙抽敭鎵撳紑,璇烽棶杩欎釜闂鎬庝箞瑙ｅ喅?... 姣忔鎴戝弻鍑绘湰鍦扮鐩樻墦寮鏃跺氨浼氬嚭鐜皊poclsv.exe閬囧埌闂闇瑕佸叧闂,鎴戝彧鑳界敤鍙抽敭鎵撳紑,璇烽棶杩欎釜闂鎬庝箞瑙ｅ喅? 灞曞紑 鎴戞潵绛 3涓洖绛 #鐑# 銆婅鍥炵瓟2021銆嬬摐鍒嗙櫨涓囧閲 鎴戠煡閬撴纭瓟妗 2007-01-15 ...
绛旓細鐥呮瘨杩涚▼涓spoclsv.exe鍜孎uckJacks.exe浜岀 spoclsv.exe瑙ｅ喅鏂规锛1. 缁撴潫鐥呮瘨杩涚▼锛歋ystem%\drivers\spoclsv.exe 涓嶅悓鐨剆poclsv.exe鍙樼锛屾鐩綍鍙笉鍚屻傛瘮濡12鏈堢垎鍙戠殑鍙樼鐩綍鏄細C:\WINDOWS\System32\Drivers\spoclsv.exe銆備絾鍙敤姝ゆ柟娉曟竻闄ゃ傗%System%\system32\spoclsv.exe鈥濇槸绯荤粺鏂囦欢銆傦紙鐩墠鐪...
绛旓細U鐩樻劅鏌撳瀷锠曡櫕鐥呮瘨spoclsv.exe 锛堢唺鐚儳棣欏彉绉嶏級鎵嬪姩鍒犻櫎鎸囧崡 浠呬緵鍙傝冦傞棶棰樼殑鎻愬嚭锛歨ttp://zhidao.baidu.com/question/17482543.html 鐥囩姸锛氬湪姝ｅ父鍚姩鎯呭喌涓嬶紝浠诲姟绠＄悊鍣ㄦ墦涓嶅紑锛堣嚜鍔ㄥ叧闂級锛屾潃姣掕蒋浠惰嚜鍔ㄥ叧闂紝regedit銆乵sconfig 绛夊潎鏃犳硶杩愯銆 鏈塖RENG鏃ュ織锛堢暐锛夊垎鏋愶細1. 鏉姣掑墠鍏抽棴绯荤粺杩樺師(Win2000...
绛旓細寮濮嬶紞锛嶈繍琛岋紞锛嶈緭鍏egedit 鏌ユ壘SPOCLSV.EXE鎵惧埌鍒犻櫎 鎸塅3涓鐩存煡鎵 鎵惧埌灏卞垹闄 涓鐩村埌鎵句笉鍒颁负姝紒鍙﹀锛歋POCLSV.EXE鏈韩灏辨槸鐥呮瘨锛屽畠浼鎴愪簡绯荤粺鏂囦欢鍚嶃
绛旓細鐟炴槦鐔婄尗鐑ч涓撴潃宸ュ叿 http://www.p234.com/Soft/cygj/200612/66.html 姹熸皯鐔婄尗鐑ч涓撴潃宸ュ叿 http://www.p234.com/Soft/rjxz/200612/68.html 閲戝北鐔婄尗鐑ч涓撴潃宸ュ叿 http://www.p234.com/Soft/cygj/200612/67.html 鐔婄尗鐑ч鐥呮瘨鍙樼 spoclsv.exe 瑙ｅ喅鏂规 鐥呮瘨澶у皬锛22,886 瀛楄妭 鍔犲３鏂瑰紡锛歎...
绛旓細琚劅鏌撶殑鐢ㄦ埛绯荤粺涓墍鏈.exe鍙墽琛屾枃浠跺叏閮ㄨ鏀规垚鐔婄尗涓剧潃涓夋牴棣欑殑妯℃牱銆1:鎷疯礉鏂囦欢 鐥呮瘨杩愯鍚,浼氭妸鑷繁鎷疯礉鍒癈:\WINDOWS\System32\Drivers\spoclsv.exe 2:娣诲姞娉ㄥ唽琛ㄨ嚜鍚姩 鐥呮瘨浼氭坊鍔犺嚜鍚姩椤笻KEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run svcshare -> C:\WINDOWS\System32\...
绛旓細鐔婄尗鐑ч鐥呮瘨,浠ヤ笅杞寳椋庤鍧涗竴鍒欒创瀛,鍓嶉潰鏄梾姣掕鏄,鍚庨潰鏄В鍐虫柟妗,浜烘湁寤鸿妤间富鎵嬪伐鏉闄,璇寸殑寰堣缁,甯屾湜瀵规ゼ涓绘湁鎵甯姪 涓銆佺梾姣掕繘绋嬩负鈥spoclsv.exe鈥濇垨鑰卻pcolsv.exe銆俶d5锛歞179c5b8d30e39542403fb757752b436 鍏蜂綋琛屼负锛氾紙鍙仛淇敼鍜岃ˉ鍏咃級1.渚濈増鏈笉鍚岋紝淇敼htm/html/asp/php/jsp/aspx锛屽湪...
绛旓細鍒嗗尯鏍圭洰褰曚笅锛歴etup.exe銆乤utorun.inf銆%System%\Fuckjacks.exe銆%System%\Drivers\ spoclsv.exe 灞鍩熺綉鐜涓嬶細GameSetup.exe 鐥呮瘨琛屼负锛1銆佸垹闄ゅ父鐢ㄦ潃姣掕蒋浠跺湪娉ㄥ唽琛ㄤ腑鐨勫惎鍔ㄩ」鎴栨湇鍔★紝缁堟鏉姣掕蒋浠剁殑杩涚▼锛屽嚑涔庢秹鍙婄洰鍓嶆墍鏈夋潃姣掕蒋浠 2銆佺粓姝㈤儴鍒嗗畨鍏ㄨ緟鍔╁伐鍏风殑杩涚▼锛屽IceSword锛屼换鍔＄鐞嗗櫒taskmon銆3銆...
绛旓細鐔婄尗鐑ч鐥呮瘨鍙樼 spoclsv.exe 瑙ｅ喅鏂规~~~鐥呮瘨澶у皬锛22,886 瀛楄妭 鍔犲３鏂瑰紡锛歎Pack 鏍锋湰MD5锛9749216a37d57cf4b2e528c027252062 鏍锋湰SHA1锛5d3222d8ab6fc11f899eff32c2c8d3cd50cbd755 鍙戠幇鏃堕棿锛2006.11 鏇存柊鏃堕棿锛2006.11 鍏宠仈鐥呮瘨锛氫紶鎾柟寮忥細閫氳繃鎭舵剰缃戦〉浼犳挱锛屽叾瀹冩湪椹笅杞斤紝鍙氳繃灞鍩熺綉銆佺Щ鍔ㄥ瓨鍌...
