esxi ups_修复假UPS跟踪号病毒重新启动计算机

esxi ups

If you or somebody you know was recently infected because they were tricked into opening a fake shipping label in an email, there’s a quick and easy way to get rid of it. At least, these are the steps that worked on our test machine.

如果您或您认识的某个人是最近被感染的，因为他们被诱骗在电子邮件中打开伪造的运输标签，那么有一种快速简便的方法来消除它。 至少，这些是在我们的测试机上运行的步骤。

The email would have come in with an attachment named something like UPS_invoice_NR34073.zip, with the following text:

该电子邮件将带有名为UPS_invoice_NR34073.zip之类的附件，并带有以下文本：

Dear customer!

尊敬的客户！

The courier company was not able to deliver your parcel by your address. Cause: Error in shipping address. You may pickup the parcel at our post office personaly! Please attention! The shipping label is attached to this e-mail.

快递公司无法通过您的地址递送包裹。 原因：收货地址错误。 您可以亲自到我们的邮局领取包裹！ 请注意！ 装运标签附在此电子邮件上。

Please print this label to get this package at our post office.

请打印此标签以在我们的邮局获得此包裹。

Naturally, this is a virus that causes your machine to repeatedly reboot itself.

自然，这是一种病毒，会导致您的计算机反复自行重启。

Luckily, there’s a quick and easy fix.

幸运的是，有一个快速简便的修复程序。

Fixing the Fake UPS Tracking Nmber Virus

修复假UPS追踪Nmber病毒

When your PC reboots again, hit the F8 key right before Windows starts so you can access the boot options, and then choose Safe Mode.

当PC再次重新启动时，请在Windows启动之前立即按F8键，以便您可以访问引导选项，然后选择“安全模式”。

Once it starts up into Safe Mode, open the Run box and type in shell:startup to get straight to the startup folder, and then delete the file named raryp32.exe from the folder.

一旦启动进入安全模式，请打开“运行”框并键入shell：startup以直接进入启动文件夹，然后从该文件夹中删除名为raryp32.exe的文件。

You should be able to reboot your machine at this point, and get back into your system. Make sure to run a full virus scan at this point! If you don’t have an anti-virus application, we recommend the free Microsoft Security Essentials.

此时，您应该能够重新引导计算机，然后重新进入系统。 确保此时进行完整的病毒扫描！ 如果您没有防病毒应用程序，我们建议您使用免费的Microsoft Security Essentials 。

Note: These are the steps that worked for us on a test machine here at the office. Viruses change over time, so the same steps may not work for you.

注意：这些是在办公室的测试机上为我们工作的步骤。 病毒会随着时间变化，因此相同的步骤可能对您不起作用。

翻译自: https://www.howtogeek.com/howto/9207/fix-the-fake-ups-tracking-number-virus-rebooting-your-machine/

esxi ups