Teach you how to kill all the current USB flash drives

Source: Internet
Author: User

Author: monyer

Monyer recently studied the spread of the USB flash drive virus and found that it was not as simple as generating an autorun. inf boot file in the root directory of the USB flash drive. If aoturun. inf is used for transmission, remember to open the USB flash drive by right-clicking => resource manager. Do not double-click it. Otherwise, the virus will be executed immediately! Then, open the resource manager's hidden System File Check, double-click to open autorun. inf to view the virus path, and then delete it.

However, the latest USB flash drive virus variants do not adopt this simple method. There are three methods: the first is to hide all the folders under the USB flash drive, copy yourself to a file with a folder icon with the same name as the original folder. When you click it, the virus will execute and the virus will open the folder with the same name. Of course, you can see this scene by removing the hidden attributes as described above.

The second is to insert the virus itself into all executable files of the USB flash drive. This is a bad situation. Generally, you must use anti-virus software or other separation software to extract the part that you can use.
The third is to directly generate an exe file with the same name as the folder under each folder, which is similar to the first one, but more obfuscated.

Therefore, we generally do not need to put anything in the USB flash drive. The light is injected with a virus, and the heavy data is changed or damaged, leading to the inability to recover important information; if you want to put something in a USB flash drive, you must back up it on your computer!
In addition, when buying a USB flash drive, you must buy the write protection. If you use it on someone else's computer but only read the information, you can enable the write protection. If the computer has a virus, you may find the following information, indicating that the computer has a virus.

Monyer was preparing to use a USB flash drive as a antivirus tool. However, since the new virus is ineffective, it will not be ugly. Instead, let's hand over this important task to anti-virus software!
A virus with a fixed name is found as follows:
Autorun. inf
AdobeR.exe
Bittorcmd.exe
Copy.exe
Desktop.exe
Desktop2.exe
Folder.exe
Host.exe
Msinfmgr.exe
Msvcr71.dll
RavMonE.exe
RavMonLog
RECYCLER *.*
RECYCLER
SHE.exe
Sxs.exe
SYSTEM. VER
Toy.exe
Setup. pif
If you find these files under the USB flash drive, you can basically identify it as a virus.
Of course, the simple solution provided by monyer is as follows:
Save the following stuff as a *. bat file and put it on the desktop. Double-click it when you feel that the USB flash disk is infected with viruses. This may help you solve some of the burden.
---------------------------- Start from below -----------------------------------
@ Echo off
Attrib-r-h-s-a j :*.*
Del/f/s/q/a j: autorun. inf
Del/f/s/q/a j: AdobeR.exe
Del/f/s/q/a j: ittorrent.exe
Del/f/s/q/a j: copy.exe
Del/f/s/q/a j: desktop.exe
Del/f/s/q/a j: desktop2.exe
Del/f/s/q/a j: folder.exe
Del/f/s/q/a j: host.exe
Del/f/s/q/a j: msinfmgr.exe
Del/f/s/q/a j: msvcr71.dll
Del/f/s/q/a j: RavMonE.exe
Del/f/s/q/a j: RavMonLog
Del/f/s/q/a j: RECYCLER *.*
Del/f/s/q/a j: RECYCLER
Del/f/s/q/a j: SHE.exe
Del/f/s/q/a j: sxs.exe
Del/f/s/q/a j: SYSTEM. VER
Del/f/s/q/a j: oy.exe
Del/f/s/q/a j: setup. pif
Taskkill/F/im assumer.exe
Assumer.exe j:
---------------------------- The end here -----------------------------------
Replace drive j with your drive letter

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.