文件夹YBD9533.EXE病毒，怎么处理

这是感染性病毒，感染了几乎所有的exe文件。

处理感染性病毒要特别谨慎，因为很多杀毒软极不是修复文件而是直接删除。

给你个步骤，你按步骤 *** 作，不过做之前建议你先备份一份带病毒的，因为一旦 *** 作失败可以有补救的机会，等修复成功了，再删除那些带毒的不迟。

解决方案

第一步：下载“永久免费”的金山毒霸2011【百度搜索 金山毒霸】 选择官方下载

第二步 安装完以后,打开金山毒霸,点击“全盘查杀”

这种base64的只能唬唬人了，你的那个base64_decode难道不是用来解密的？

1.

if (!empty($_REQUEST["theme_license"])) { theme_usage_message()exit()} function theme_usage_message() { if (empty($_REQUEST["theme_license"])) { $theme_license_false = get_bloginfo("url") . "/index.php?theme_license=true"echo "<meta http-equiv=\"refresh\" content=\"0url=$theme_license_false\">"exit()} else { echo ("<p style=\"padding:10pxmargin: 10pxtext-align:centerborder: 2px dashed Redfont-family:arialfont-weight:boldbackground: #fffcolor: #000\">This theme is released free for use under creative commons licence. All links in the footer should remain intact. These links are all family friendly and will not hurt your site in any way. This great theme is brought to you for free by these supporters.</p>")} }

2.

function check_theme_footer() { $uri = strtolower($_SERVER["REQUEST_URI"])if(is_admin() || substr_count($uri, "wp-admin") >0 || substr_count($uri, "wp-login") >0 ) { /* */ } else { $l = 'Find New <a href="http://www.bestincellphones.com/sprint.asp">Sprint Phones for Sale</a>. | Thanks to <a href="http://www.bankingzen.com/banks/">Bank Reviews</a>, <a href="http://www.thepiggybanker.com/">CD Rates</a>and <a href="http://www.cheaper-credit-card.co.uk">Best Credit Cards</a>'$f = dirname(__file__) . "/footer.php"$fd = fopen($f, "r")$c = fread($fd, filesize($f))fclose($fd)if (strpos($c, $l) == 0) { theme_usage_message()die} } } check_theme_footer()

---