The following is a detailed call, which I hope will be useful to you and completely solve the problem of sapi.exe program automatically connecting to the network.
This post was last edited by lyz 1258 on 2009-12-313: 27.
Mobile phone model: htc 3232；;
Operating system: wm6.1;
Operating system version: HTC Touch 3G _ 21051_ 2.33 driver, Manila 6-key version;
Symptoms: I downloaded a billiards game in Digital Tribe. After installing NetQin, I reported that there was a virus. I suggested adding htchome.exe program to the startup item, and added htchome.exe and sapi.exe programs in the process. At that time, I didn't pay attention to these programs, because the creation time of these two programs was 08. 1 1.09, thinking that netqin had misreported them. I immediately scanned it with netqin and found five viruses. After processing, I deleted the billiards game and scanned it again. No virus was found. Three days later, I found that sapi.exe would request to connect to the network every once in a while (about eight or nine times a day), but I banned this program from connecting to the network, but repeated prompts were annoying!
Solution: Search on the Internet. Although there are several similar virus solutions, none of them are applicable here. After several days of research, it was finally solved. The following solutions are listed for the reference of machine friends.
1, open the process manager (MemMaid is recommended, which can also be used to optimize the system at ordinary times), and terminate the htchome.exe and sapi.exe programs;
2. Still use this software, open the startup item, find the htchome.exe program, and terminate; (You can also use Explorer to open the Windows\StartUp\ folder, find the htchome.exe program and terminate it);
3. Open the Windows folder with the resource manager (comrades with conditions had better connect PPC to the computer and finish it on the computer). Find these four files: sapi.exe, msgr.dll, prog 1.exe and prog2.exe, and delete them (this step may be less than four files, and those that can be found will be deleted mercilessly).
4. Open the registry (RegEdit is recommended).
1) found: [HKEY _ local _ machine \ initialization] launch91= "windows \ tapi.exe" deleted.
2) Look again: HKEY _ class _ root \ clsid \ {3a4c10e-673c-494c-98a2-cc2e91a48165438}
HKEY _ LOCAL _ MACHINE \ Software \ Microsoft \ Inbox \ Svc \ SMS \ Rules \ { 3 b4c 10E-673 c-494 c-98 a2-cc2e 9 1a 48 1 15 }
delete
3) The above registry may not be created, and all that can be found will be deleted.
5, so that it can be thoroughly cleaned up.
The symptom of this virus is that it cannot receive short messages sent by 10086; Boot up and send short messages to the virus designated number, revealing user information; Automatically connect to the network and download files that damage the system.
The program "htchome.exe" is very confusing. The function of the startup item is to start the "sapi.exe" regularly and connect the network.
Friendly reminder:
1. The above methods are for reference only. I solved it in this way, but it doesn't mean that all models and everyone can solve it.
2. It is very necessary to install antivirus software on smart phones. I have installed antivirus software such as Rising, Norton, Kingsoft and Kaba. I use netqin at present. Personally, I think NetQin is still very good. It's a monthly edition, eight yuan a month. NetQin played a key role in this virus incident. Although he can't completely kill all virus files, at least he killed five viruses at first, and prompted to add "htchome.exe" program and "sapi.exe" program to the startup item to automatically connect to the network, which made me realize that the virus was not completely cleaned up, otherwise the future trouble would be endless!
3. Smartphone software is generally pj version now. When downloading, don't easily go to an unfamiliar website to download the software of an unfamiliar person pj. Try to download the software of pj sinicization in large forums. Scan with anti-virus software before installation to make sure there is no virus before installation!
4. Many friends don't know that they are poisoned. Please check the Windows folder. If sapi.exe, msgr.dll, prog 1.exe and prog2.exe have any of these four files, you are poisoned!