无法修改hosts文件The hosts file cannot be modifiedCannot modify the Hosts file 2008-03-17 22:442008/01/14 08:44
P.M. to solve the more such viruses (9505, ads3721, 520tt,33movie) , directly hijacked the HOSTS table, and cannot modify delete and save, display process has beenused, whichmany users are incapable of action, especially the use of 360 security guards friend, a run will automatically shut down then, start to find 360 security guards, we can manually delete the virus killing and.
We must first enter safe mode, why not say.
Download a 360 safe, do not install! After entering safe mode,the closing process EXPLORER.EXE, and then add the process of EXPLORER.EXE (specific operation: file, the new task "run" to browse to C:\WINDOWS\explorer.exe) . Then install 360 security guards, 360 security guards to repair operation.
By running the regedit and delete the red project, find HKEY_LOCAL_MACHINE\SOFTWARE\Microsof t\Windows\CurrentVers io n\Ru n
There are several possibilities behind, I find that there are 2 kinds of the name for the R or A!
1, R = C:\Windows\System32\rundll32. exe ctfmon.dll s
2, A C:\WINDOWS\system32\rundll32. exe msad.dll s
If you find the 2 one, delete the project.
Then find C:\Windows\System32\ctfmon.dll or
C:\Windows\System32\msad.dll
Delete the file.
Repair HOSTS files (in safe mode to install and run 360 security guards had been repaired, the repair manual method here)Please operate according to the following methods:
1, the search system in the hosts file, can also according to the following path:
Windows 98 system file path: \Windows directory;
Windows XP system, file path: \Windows\System32\Drivers\etc directory;
Windows 2000 system file path: \WINNT\System32\Drivers\etc directory;
2, the file backup;
3, right click on the hosts file, select "open" select notepad;4, delete the contents of Notepad, or simply delete the hosts file! (does not affect the normal use of the system) .PS: if the virus will leave what point on the QQ, because of a running QQ, HOSTS immediately turned on me, was hijacked, so in a safe mode. All the steps ahead, it is best to uninstall
the QQ from! You may come to naught! ! !
Many people live in!
Do prevention! Manual removal is better than always reloading!Quote:
The last two days the system suddenly become less friendly, from time to time some spam pages play out, access to web pages is not normal. . .
All of these symptoms will tell me, system poisoning!Antivirus poisoning slightly.
However, everything is not so smooth, it is their encounter this problem done:
1. security guards, gosh, malicious software 6 models,including 263 repair, IE page, Hosts DNS, malicious software continuously in normal and safe mode killed N times, killing end and Hosts, there is no way to fix
2. enable Norton Antivirus, fast antivirus, no fruit. A comprehensive anti-virus 110 virus infection
See the Hosts file 3. , N found many garbage points to a IP address, can not be changed, can not delete the file, this is the most terrible, I need to use the Hosts file
4. and Baidu on the "Hosts file cannot be modified"
5. online and in many ways, what Mount Huangshan IE repair experts, Frostsaber IceSword, QQ tail zhuanshagongju. . .
6. , you have to try it, to no avail. The Speechless is Mount Huangshan IE repair this, no matter after the operation there is no progress without conditions for rebooting your computer! !Rely on.
There are 7. pages with 360 security guards said that in fact you can fix the problem!
I Speechless? How do I do before no effect?
8. can not give up, this is a method of thinking to upgrade security guards, that really is not the latest version. I upgrade.
9. successful repair again haha! ! !
Depressed yo, engage in a day for a long time, so &_&I like the above. But the hosts file is locked and antivirus software update URL is blocked, and start something deleted again
Behind the way theywant, there should be written in the driver,the file is *. sys, look at the really
As I approach, let everyone to be a reference
1/ download a tool called ">IceSword.exe" the ice sword ", if the normal can not enter the system, download to safe mode with network links
2/ enter the normal safe mode, without anything
3/viewsystem services, whether out of order digital services,stop it, I was "40******"
4/ check the registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsof t\Windows\CurrentVers io n\Ru n
HKEY_LOCAL_MACHINE\SOFTWARE\Microsof t\Windows\CurrentVers io n\RunOn ce
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Wi ndows\CurrentVersi on \Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Wi ndows\CurrentVersi on \RunOnc e
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Wi ndows\CurrentVersi on \RunOnc eEx
Remove excess virus promoter
According to the 5/registrykey to findthe virus file, usually in c:\windows and c:\windows\system32.
Of course, these operations shouldbeused toBingjian this tool,otherwise you are not delete files
I have 2 system32 pvcvwi.dll/aoeahz.dll and system32\drivers pvcvwi. sys/aoeahz. sys are deleted
Then the system32\drivers\etc\hosts file is deleted, which has been written out of order URL
A new hosts file, the contents of a "127.0.0. 1 localhost", and then set to read-only
6/ restart is normal, to update the virus database, and then use the Kaba 360 scanning system again
乐凝网络怎么样?乐凝网络是一家新兴的云服务器商家,目前主要提供香港CN2 GIA、美国CUVIP、美国CERA、日本东京CN2等云服务器及云挂机宝等服务。乐凝网络提供比同行更多的售后服务,让您在使用过程中更加省心,使用零云服务器,可免费享受超过50项运维服务,1分钟内极速响应,平均20分钟内解决运维问题,助您无忧上云。目前,香港HKBN/美国cera云服务器,低至9.88元/月起,支持24小时无理...
我们先普及一下常识吧,每年9月的第一个星期一是美国劳工节。于是,有一些服务商会基于这些节日推出吸引用户的促销活动,比如RackNerd有推出四款洛杉矶和犹他州独立服务器,1G带宽、5个独立IP地址,可以配置Windows和Linux系统,如果有需要独立服务器的可以看看。第一、劳工节促销套餐这里有提供2个套餐。两个方案是选择犹他州的,有2个方案是可以选择洛杉矶机房的。CPU内存SSD硬盘配置流量价格...
瓜云互联怎么样?瓜云互联之前商家使用的面板为WHMCS,目前商家已经正式更换到了魔方云的面板,瓜云互联商家主要提供中国香港和美国洛杉矶机房的套餐,香港采用CN2线路直连大陆,洛杉矶为高防vps套餐,三网回程CN2 GIA,提供超高的DDOS防御,瓜云互联商家承诺打死退款,目前商家提供了一个全场9折和充值的促销,有需要的朋友可以看看。点击进入:瓜云互联官方网站瓜云互联促销优惠:9折优惠码:联系在线客...