Reject the Autorun. inf virus in the USB flash drive

At present, the U disk virus is very serious. Almost all USB flash drives with viruses have an autorun. inf in the root directory. The shortcut menu has items such as "automatic playback", "Open", and "Browser. Because we are used to double-click the disk to open the disk, but now we double-click the disk, instead of opening the USB flash disk, but enabling the program set in autorun. inf to play automatically. You only need to right-click to enable the virus. However, if your host has many people and you cannot guarantee that they will not double-click to open the USB flash drive, you can use the following method.

Recruitment 1. Disable AutoRun in a group of policies (suitable for those unfamiliar with computers)

If you want to disable the automatic playback function of Windows XP at one time, follow these steps:

1. Click Start> Run. In the open box, type gpedit. msc and click OK to open the Group Policy window;

2. In the left pane, under "Local Computer Policy", expand "Computer Configuration> management template> System", and then under the "Settings" title in the right pane, double-click "Disable automatic playback ";

3. Click the "Settings" tab, select the "enabled" Check button, click "All Drives" in the "Disable automatic playback" box, and click "OK, close the "Group Policy" window.

Trick 2: Disable the AutoRun function in the Registry

Enter Regedit in "run" in the "Start" menu, open registry editor, and expand

Under the primary key of HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Exploer, find "NoDriveTypeAutoRun" in the right pane, which determines whether to execute the AutoRun function of CDROM or hard disk.

Double-click "NoDriveTypeAutoRun". By default (that is, you have not disabled the AutoRun function), the default key value of "NoDriveTypeAutoRun" is, the attachment has been captured. The first value "95" is a hexadecimal value, which is the sum of all devices that are prohibited from automatically running. Converting "95" to binary is 10010101. Each of them represents a device. Different devices in Windows are represented by the following values:

The device name. The device name must contain the following values:

Device type not recognized by DKIVE_UNKNOWN 0101 h

DRIVE_NO_ROOT_DIR 1002 h Drive without the root directory (Drive without root directory)

DRIVE_REMOVABLE 2104 h Removable drive (Removable drive)

DRIVE_FIXED 3008 h Fixed drive (Fixed drive)

DRIVE_REMOTE 4110 h Network drive)

DRIVE_CDROM 5020 h drive (CD-ROM)

DRIVE_RAMDISK 6040 h RAM Disk (RAM Disk)

Retain the drive type not specified for 7180 h

The value 0 in the table listed above indicates that the device is running, and the value 1 indicates that the device is not running (by default, windows prohibits the automatic operation of devices such as 80 h, 10 h, 4 h, and 01h. The value accumulation is exactly 95 h in hexadecimal format, so NoDriveTypeAutoRun "has a default key value of, 00, (00 ).

1 2 Next Page

[Content navigation]
Page 1: reject the Autorun. inf virus in the USB flash drive	Page 1: reject the Autorun. inf virus in the USB flash drive