Windows XP | Vírus impede login

By -
Arrancar com o cd do windows xp.
Entrar em modo reparar.
copiar userinit.exe para cima do ficheiro usrsvc.exe
o nome do ficheiro pode alterar.

Pode ser necessário correr software externo tipo winpe e alterar o registo em:
Local machine/software/microsoft/windowsNT/currentversion/winlogon
editar userinit e aponta-lo para:
C:\WINDOWS\system32\userinit.exe,

o vírus pode ser
- unsrvc.exe
ou
- usnrvc.exe

ou pode sofrer outras mutações (diferentes nomes)

de qualquer forma está em
c:\windows\system32

verificar também a existência de ficheiros .dll "anormais":
p.ex.: xyzkkk.dll kythsmz.dll que normalmente estão a correr, o que impossibilita a sua remoção.

para contornar isto, usem o programa "Unlocker 1.8.5" que termina os processos a correr em memória.

Sempre que possível façam pesquisas de spyware com o Spybot Search and Destroy.

Comments

Post a Comment

Popular posts from this blog

Breaking down document locking in SharePoint

By -
Image
This is a topic I've been meaning to discuss in a while. We open, change and close documents almost every day, and sometimes we collaborate with other people at the same time on those documents. SharePoint brings all co-authoring features we need, straight out-of-the-box, but sometimes, there are problems. While things are starting to look better on the cloud side, the concept of document locking is still very much up-to-date and understanding how it works and what to do when things go wrong is crucial. In an article that has since disappeared the Microsoft Knowledge Base (but still available here ), Microsoft explains it best: When a document is opened by a client program, Windows SharePoint Services puts a write lock on the document on the server. The write lock times out after 10 minutes. Users cannot modify the document during the time when the document is locked. In a scenario where the program that opens the document unexpectedly quits or crashes and you try to open the do...
Read more

Document ID not being generated

By -
Image
Problem In a scenario where we have many document Content Types, we may want to enable Document ID - aka "Permanent Links" - which is a feature in SharePoint that assigns a specific ID for each document. That ID never changes even if the document is renamed or moved to another location. In this scenario, the Document ID field was being generated for some libraries/content types, but not others, which is a surprisingly common problem. Background There are several stages we need to go through to enable use this mechanism. Stage 1 We enable the feature in the Site Collection Features. Stage 2 Under Site Collection Administration > Document ID Settings, we need to enable the assignment and pick a prefix. The IDs use the format: PREFIX-LISTID-LISTITEMID ( ref ) Where: PREFIX: the preconfigured prefix for the site collection, which can be any set of numbers and letters between 4-12 characters LISTID: the property docid_msft_hier_listid of the list...
Read more

Open Office documents in any browser using Office URI scheme

By -
Image
Problem: One of the problems when shifting to a non-IE browser in SharePoint, is that immediately documents start downloading instead of opening in the browser. While we can overcome that by tweaking the "Open in browser" library option, sometimes it is just very difficult to interact with Office since we cannot call "CoreInvoke" or functions such as createNewDocumentWithProgIDEx from the SharePoint OpenDocuments Class (OWSSUPP.DLL), often ending up with error message, The document could not be opened for editing. A Microsoft SharePoint Foundation compatible application could not be found to edit the document. One possible scenario could be: How to open an instance of a .dotx Word Document Template in Google Chrome and allow a suggested save location? Solution: Starting SharePoint 2013 and Office 2010 SP2, we can use URI schemes, which are basically URLs starting with "ms-X" which trigger the desktop application to open, and works in both IE and ...
Read more