Get the App
SLTechnology News&Howtos  ›  Servers  › 

Win32.udiskvir.spath.b virus treatment

Shulou Source: shulou.com Published: 2022-06-03 04:48:01 09月21日 Update

Antivirus software found svchost.exe virus, virus directory is c:\windows\temp, this file is imitation system process, can be passed tasklist.exe /svc| findstr "svchost.exe" Find the description listed as "missing", remember pid.

Abort via Task Manager does not work, deleting a virus file will generate a new one immediately.

You can use taskkill /pid 12592 /pid 12452 /f to forcibly terminate it.

This virus uses port 445 to spread. It is recommended to block port 445 in the local area network at the same time. Layer 2 prohibits 445 through the system firewall.

Tags: Virus file port system layer 2 task function at the same time local area network local area network recommendation antivirus software directory software process firewall immediately accessible spread generated Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno Linux macOS MySQL Shulou Information Docker