Clean up the rose virus in the U disk.

I. Rose.exe virus is mainly manifested in

1, in the system to occupy a large number of CPU resources.

2, create Rose.exe, AUTORUN.INF2 files under each partition, open "My Computer", the default setting of each hard drive letter is changed to "AutoPlay" instead of the original "open". Double-click the disk characters to display Autorun, but the partition cannot be opened.

3, most through the U disk, mobile hard disk and other storage equipment spread. Network hazards are still in the process of discovery.

4, may cause some computer operating system crashes, performance in post Self-Test direct and repeatedly restart, unable to enter the system. If you look closely, you will find that the system is missing a Ntdetect.com file.

　　Two. How to Solve

1, if the system crashes, after the post directly and repeatedly reboot, unable to enter the system, you can use a U disk or floppy disk from another computer to copy a same version of the Ntdetect.com to the local system disk.

2, after entering the system, pull out the task manager, in the process page to end all the name of the Rose.exe process (recommended in the following operation to repeat this operation, to ensure that the virus file does not recur).

3, in the beginning--run the input "regedit" (XP system) to open the registry, find all the "Rose.exe" key value items, find the entire Shell subkey deleted.

4. In My Computer-tools-Folder Options-view-Show All files and folders, remove the "Hide protected system files" check.

5, to each disk Fu right-open enter (remember not to double-click), delete all Rose.exe and Autorun.inf files.

6, under the c:windowssystem32 to find there is no Rose.exe file, if there is directly deleted.

　　Attached: To teach you in the absence of any tools manual antivirus (remember to remove the need to enter the letter in the disk when the right key to open, do not double-click, otherwise it will be undone!)

1. In My Computer-tools-Folder Options-view-Show All files and folders, and remove the "Hide protected system files" check.

Click Start, right-click My Computer, and then click Properties.

Click the System Restore tab. Select Turn off System Restore or turn off System Restore on all drives ...

(usually Rose.exe will disguise hidden in each letter of the System Restore folder is the antivirus software to kill the most basic reason)

2, into the Safe mode (remember to finish the above operation!) in Safe mode is not a system Restore!

3. Generate a. bat batch file with the following contents of the batch file:

taskkill/f/im Rose.exe

Del/f/a:s C:autorun. Inf

Del/f/a:s C:rose.exe

Del/f/a:s D:autorun. Inf

Del/f/a:s D:rose.exe

Del/f/a:s E:autorun. Inf

Del/f/a:s E:rose.exe

Del/f/a:s F:autorun. Inf

Del/f/a:s F:rose.exe

Del/f/a:s G:autorun. Inf

Del/f/a:s G:rose.exe

Del/f/a:s H:autorun. Inf

Del/f/a:s H:rose.exe

Del/f/a:s I:autorun. Inf

Del/f/a:s I:rose.exe

Del/f/a:s J:autorun. Inf

Del/f/a:s J:rose.exe

Del/f/a:s K:autorun. Inf

Del/f/a:s K:rose.exe

Del/f/a:s L:autorun. Inf

Del/f/a:s L:rose.exe

Del/f/a:s M:autorun. Inf

Del/f/a:s M:rose.exe

Del/f/a:s N:autorun. Inf

Del/f/a:s N:rose.exe

Del/f/a:s O:autorun. Inf

Del/f/a:s O:rose.exe

Del/f/a:s C:system32rose.exe

Del/f/a:s C:system.sys

Del/f/a:s C:windowssystem32run.reg

Del/f/a:s C:windowssystem32systemdate.ini

Del/f/a:s D:systemdate.ini

Del/f/a:s d:systemfile.com

Next, A. reg registry file is generated, and the contents of the file are as follows:

Windows Registry Editor Version 5.00

[Hkey_local_machinesoftwaremicrosoftwindowscurrentversionrun]

"DLL" =-

Run the above two files

4, in the beginning--run enter "regedit" open the registry, find all the "Rose.exe" key value items, find the entire Shell subkey deleted. (Remember that if the shell can be deleted, and then delete one continue to press F3.) Until the registry search completes)

5, on each disk Fu right-open enter (remember not to double-click, or on the naught), and then check again!

Then delete all the Rose.exe and Autorun.inf files and any suspicious files related to Rose.exe and Autorun.inf files! Include hidden System Restore folders! And then reboot and finish!

Since then, whether you are rookie or master no longer need to be a U disk in the Rose virus worry, do not see the tutorial seems very long, in fact, the operation is very simple, learn this professional manual cleaning skills, no longer need to seek anti-virus tools, like friends to learn it.