Get rid of the poison. Double-click the antivirus method that cannot open the drive

Maybe you've also had a U-disk inserted into the computer after the double-click can not be opened, and then double-click All drive letters have no way to open, after the test found only using the resource manager can. But after all, do not know what the virus in the computer also dry something, should be thoroughly anti-virus.

　　Symptom Description

1. Double-click the drive letter to open and the resource manager can use it.

2. In the beginning → operation input cmd into the command line mode, input C: Enter, enter the C packing directory, input dir/a View all files, found that there are two files: Autorun.inf RavMon.exe.

3. Enter the msconfig in the start → run, enter the system configuration program, select the "Startup" tab, which has an item called "MDM" pointing to "C:\windows\mdm.exe".

　　Solving Method

1. Reboot, press F8 at power-on, enter Safe Mode with command line, select Administrator account login.

2. Enter regedit at the command line to enter the registry, look for "RavMon.exe" and delete it if a match is found (I did not find it to be safe). Note Rsravmon is rising anti-virus software, do not delete.

3. Enter the Msconfig at the command line, enter the system configuration program, select the "Startup" tab, and save all the hooks in front of all "MDM" items.

4. At the command line, enter the following instructions

Del c:\autorun.inf/f/s/q/a Del
c:\ravmon.exe/f/s/q/A Del
d:\autorun.inf/f/s/q/A Del
d:\ravmon.exe/f/s/q/a ...

How many disk characters are lost. Note that this command will delete the root directory down to all directories of the corresponding files, so you can see the deletion of the root directory immediately after pressing CTRL + C interrupt.

5. Reboot, OK.

6. To be completely clear, the main or to the U disk in the poison source to kill. I did not try any other way, directly lazy into Linux with rm deleted a clean. If you know someone who has linux to ask for help, I think it's the safest thing to do. Under the Windows/dos platform how to do also please ace.

　　Description

1.MDM is Microsoft's machine Debug Manager, system process; The virus disguised as mdm.exe.

2. This anti-virus method thought can be used to remove similar viruses.