"Critical System Error" popup问题的处理过程
By chuntian 发表于 2006-10-9 9:31:00
At apparently random times, my computer shows a popup window with heading "Messenger Service" and a message saying:
"Windows has found CRITICAL SYSTEM ERRORS ... download Registry Repair from http://www.criticalregistryfix.com" The url is not always the same.
I have run the latest version of Adware Away, yet continue to get these popup windows.
Any suggestions?
答：
Ad-Aware with the latest reference file updates should detect and remove "VirusBurst", however there are numerous variants of this with the same symptom. Some variants come with additional nasties as well, so each case is many times different.
SmitfraudFix should also be able to remove it:
1. Download SmitfraudFix(by S!Ri) to your Desktop (Win2k/WinXP only!).
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.
How to extract (decompress) zipped or compressed files
http://www.lvsonline.com/compresstut/index.shtml
Note : process.exe is part of the SmitFraudFix tool and is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky, Panda) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
2. Reboot into Safe Mode
You can usually do this by restarting your computer and continually tapping F8 until a menu appears. Highlight Safe Mode and hit enter.
How to start the computer in Safe mode
http://service1.symantec.com/SUPPORT/tsgen...src="/sec_doc_nam"
3. Once in Safe mode, open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter.
The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. Answer Yes to the question "Replace infected file ?" by typing Y and hit Enter.
A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually.
中文使用说明桌面劫持清除工具－SmitFraudFix介绍
http://forum.ikaka.com/topic.asp?board=67&artid=8173609
另外说明一下，中招后有些网友说可以禁用Messager服务来处理，实践证明这个办法根本不行，还有那个删除c:\windows\system32\titiau.dll的方法也不行，因为根本找不到这个文件，据说有些人重装系统后，状态栏里也还是有这个Critical system error的图标在，目前用SmitFroundFix是唯一有效的方法。
