U disk after the phenomenon of poisoning

If you use a U disk and other mobile storage devices in the process, when the following symptoms show that your u disk has been poisoned:

1, in the U Disk right button menu appears "AutoPlay", "auto" and other words

2., open u disk when the speed is very slow, double-click Enter always show by a certain program occupation such tips

3, in the U disk root directory appears some inexplicable hidden files, such as "Autorun.inf, Msvcr71.dl,ravmone.exe, Tel.xls.exe" and the Hidden directory "RECYCLER."

U disk Virus Removal method

One of the countermeasures: manual removal of u disk virus

First, show hidden files in the U disk directory to check for "Auto Run.info, Msvcr71.dl, Ravmone.exe" and hidden Directory "RECYCLER". If there is, you can be sure that the USB disk infected with the virus. --(note: Sometimes tricky viruses can disable the display of hidden files and avoid killing.) can be in the U disk root directory, press the "CTRL + a" key combination, if this prompt "The file contains hidden files, then you can be sure that the virus has broken the folder options related settings, so that the file can not be displayed." Turn on my Computer--control Panel--Folder ——— View--Hide folders and files--show all. So you can delete the virus file one by one, if you encounter a virus file can not be deleted, press the "Ctrl+alt+delete" key combination, open Task Manager, the shape like "ravmone.exe,svohost.exe" such as the end of the virus, again deleted. Then, search the above virus file, focus on the "c:windows" directory and "C:windows system" and "c:windowssystem32" Directory of illegal programs, found after one by one delete. Next, enter Registry Editor, search by virus name keyword, find after one by one delete. Focus on the [hk-loacal Machinesoftwaremicrosoftwindowscurrentversionrun] Branch, and the pane on the right will generally be visible as "C:windowsravmone.exe" or " C:windowsystem32svohost.exe "Such a virus startup entry, delete it. Finally, in the Run dialog box, type "Msconfig", enter the System Utility Configuration window, will be in addition to antivirus software, firewalls and input, outside the start of all prohibited, the virus was completely cleared.