Some friends plug the U disk into the computer, double-click can not open the drive, and then double-click all the drive letter has no way to open, after the test found only using the resource manager can. What is going on, how to solve the problem that the computer double click cannot open? Below we will study the cause of the problem and how to completely kill the virus.
Symptom Description:
1. Double-click the drive letter to open and the resource manager can use it.
2. In the beginning → operation input cmd into the command line mode, input C: Enter, enter the C packing directory, input dir/a View all files, found that there are the following two files: Autorun.inf RavMon.exe
3. Enter the msconfig in the start → run, enter the system configuration program, select the "Boot" tab, which has an item called "MDM" pointing to "C:windowsmdm.exe"
Solving method
First step, reboot, press F8 when you turn on, enter Safe Mode with command line, select Administrator account login.
In the second step, enter regedit at the command line to enter the registry, look for "RavMon.exe", and delete if a match is found. Note Rsravmon is rising anti-virus software, do not delete.
In the third step, enter the Msconfig at the command line, enter the system configuration program, select the "Startup" tab, and remove the hooks in front of all "MDM" items and save them.
Fourth step, at the command line, enter the following instructions: Del c:autorun.inf/f/s/q/a del c:ravmon.exe/f/s/q/a del d:autorun.inf/f/s/q/a del D:ravmon.exe /F/S/q/a ... How many disk characters are lost. Note that this command will delete the root directory down to all directories of the corresponding files, so you can see the deletion of the root directory immediately after pressing CTRL + C interrupt.
Fifth step, reboot, OK.
Special Note: 1. MDM is Microsoft's machine Debug Manager, the system process; The virus pretends to be mdm.exe. 2. This anti-virus method thought can be used to remove similar viruses.
Note : More wonderful tutorials Please pay attention to the triple computer tutorial section, triple Computer office group: 189034526 welcome you to join