Developer on Alibaba Coud: Build your first app with APIs, SDKs, and tutorials on the Alibaba Cloud. Read more ＞
A classmate for help. U disk poisoning infected machine, resulting in the open "My Computer" can not see any disk partitions, and the system card to suspended animation state.
First, the AutoPlay feature is turned off by Group Policy. Insert a U disk.
Implementation: Start-run-browse, find the corresponding U disk partition, copy IceSword and Sreng.
Change the name of the IceSword software, change the name to any name, double-click, the System blue screen automatically restart. Stuck in the BIOS screen. Press the restart key still, then disconnect the host power for a moment, then open the function of normal entry.
Sreng Scan log, found the following suspicious content:
[Rising Protected Storage/risieg] [Running/auto Start]
and use Sreng to remove the corresponding service items and drivers, as follows:
Start Project-> service-> Win32 Service Application-> Select Hide Microsoft Services and delete the following name:
Run IceSword again, everything is OK, delete each partition of the Auto class virus file (name forgotten)
Clean IE cache, the rest is to kill soft scan.
The above driver files and IE add-in files may be randomly named for reference only.
This article is an English version of an article which is originally in the Chinese language on aliyun.com and is provided for information purposes only. This website makes no representation or warranty of any kind, either expressed or implied, as to the accuracy, completeness ownership or
reliability of the article or any translations thereof. If you have any concerns or complaints relating to the article, please send an email, providing a detailed description of the concern or
complaint, to email@example.com. A staff member will contact you within 5 working days. Once verified, infringing content will be removed immediately.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
and provide relevant evidence. A staff member will contact you within 5 working days.