诡异的修改首页--00333.cn/alei.htm

现在用的工作机，自从装过某个看星号的软件以后，过一段时间就会被修改首页，现在几乎可以确信，于每周一修改一次首页，目前尚未找到原因。

网上所介绍的解决方法不行了，估计是这垃圾软件又升级了。

Friday, September 18, 2009 update
经过了一个多月，终于不再修改了，升级后的NOD32查出了mshtmleh.dll文件为病毒。
我想解决方法也简单，删除%systemroot%\system32\mshtmleh.dll和%systemroot%\system32\dllcache\mshtmleh.dll

posted @ 2009-08-10 15:16 XiaoHui 阅读(1752) 评论(3) 编辑 收藏

　回复　引用　  
#1楼2009-09-13 09:27 | 00333[未注册用户]
我也一样，用了一个看星号的软件以后出现的。也是每周，有的时候还不不止，动不动出来修改首页，原因也是找不到。看不出它的机理唉。。
　回复　引用　查看　  
#2楼[楼主]2009-09-18 11:04 | XiaoHui      
@00333
删除mshtmleh.dll就可以解决了
　回复　引用　  
#3楼2009-09-28 17:31 | ddddddddddddddddddd[未注册用户]
Type POINTAPI
x As Long
y As Long
End Type
Declare Function GetCursorPos Lib "user32" (lpPoint As POINTAPI) As Long
Public Declare Function GetWindowOrgEx Lib "gdi32" (ByVal hdc As Long, lpPoint As POINTAPI) As Long
Declare Function WindowFromPoint Lib "user32" (ByVal xPoint As Long, ByVal yPoint As Long) As Long
Declare Function GetWindowText Lib "user32" Alias "GetWindowTextA" (ByVal hwnd As Long, ByVal lpString As String, ByVal cch As Long) As Long
Declare Function SetWindowPos Lib "user32" (ByVal hwnd As Long, ByVal hWndInsertAfter As Long, ByVal x As Long, ByVal y As Long, ByVal cx As Long, ByVal cy As Long, ByVal wFlags As Long) As Long
Private Sub Timer1_Timer()
Dim p As POINTAPI
Dim lp As Long
Dim tempstr As String
Dim password As String * 255
GetCursorPos p
lp = WindowFromPoint(p.x, p.y)
GetWindowText lp, password, 255
Text1.Text = Trim(password)
Text1.Refresh
End Sub

最新IT新闻:
· 苹果：还能垄断行业利润多久？
· 那些古老的计算机 竟然还在使用
· Rovio股权结构曝光：CEO持股0.6% 其父持股近70%
· 豌豆荚转向Android下载 竞价推动收入逐月翻番
· 维棉网被曝欠数百万广告费 再度借裁员减压
» 更多新闻...