Batch Process The auto.exe Immune Function

Source: Internet
Author: User

Batch Process The auto.exe Immune Function
The system was a bit abnormal since the beginning of yesterday afternoon. It is estimated that it was an advertisement plug-in. It was immediately closed after running with 360 security guard,
The malicious software cleanup assistant is not completely cleaned up. It enters the safe mode and restarts the computer after cleaning.
Run the "winpe" pattern to import the file. If you find that each directory contains auto.exe, the file cannot be edited. The file is a 32-bit executable file. delete the file and restart the computer to restore it to normal.
First, autorun. inf causes autorun. inf to be immune everywhere on the Internet. Program Now, the auto.exe is displayed again.
Admire,
Set auto immunization manually
First, Enter cmd when you start running.
Second, enter CD \ to return to the root directory.
Third: X indicates the directory to be immune
Fourth: MD auto.exe creates a folder with the same file name as the virus configuration file.
Fifth, CD auto.exe enters this folder.
Sixth: MD immunization program... \ note this point. You must enter more than two points. Otherwise, the virus will still replace this folder.
Sixth: CD \ press enter to return to the root directory
7. attrib + H + S + R auto.exe sets this file to hide the system read-only attribute.
8. Enter exit to exit.
Save as do. BAT and copy it to the root directory of each disk. Run the command. CopyCode The Code is as follows: CD \
Attrib-H-S-r auto.exe
Del auto.exe
MD auto.exe
CD auto.exe
MD script home ..\
CD \
Attrib + H + S + R auto.exe

One of them is that the hidden files and folders cannot be displayed in Windows XP. Even if "Show Hidden Files" is selected in "Folder Options", the hidden files cannot be displayed after confirmation, again, the folder option looks the same.

It seems that Windows is much more complicated than Unix. I asked Google for help and soon found the answer to my problem:
Go to the Registry and expand:
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Hidden \ showall]
Change the double byte value checkedvalue in the right window to 1.

It seems to be a virus. In these years, Windows virus protection has become a serious problem.

Further, if you want to hide the file attributes to protect some confidential files, you can learn how to handle these viruses.
Run "Regedit" to start the Registry Editor and open
KEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Hidden \ showall
To ensure security, export the branch, delete the showall branch, and open the "Advanced Settings" window again. Now you cannot find the "show all files and folders" option, your hidden files are now easy to worry about.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.