Use Windows XP system disk quota management function with antivirus

Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall

Recently encountered Svchost.exe virus, the virus like to stay in the Windows root directory, with the system started running, in the list of the starting program does not have its name. The guy also brought two generals: Autorun.inf and Ravmon.exe. Antivirus software to kill its men, svchost.exe his elderly will immediately let Autorun.inf and Ravmon.exe back from the dead.

Autorun.inf and Ravmon.exe both have hidden properties, and the explorer has been tampered with by these guys, the folder options in the Tools menu are gone, so it's not possible to set it up from here, showing hidden folders and files.

After testing, I found that there is a good way to let Autorun.inf and Ravmon.exe not be resurrected. is to take advantage of the disk quota management feature that Windows XP comes with.

Open Explorer (double-click the My Computer icon on the desktop with your mouse), right-click System Partition C:, in the pop-up menu click "Properties", the system disk properties set up the interface, click the "Quota" tab, select "Enable quota management" (√ in the box), select " Deny disk space to users exceeding quota limit, and then check "limit disk space to 1KB", OK, exit, set to take effect immediately, then see C disk space and free space have become 0. Do not be afraid, the system is basically not affected, but the internet is very difficult.

At this time the system disk is basically in can delete files and can not write to the state of the file, that is only allowed to enter, good!

In this state, even if it is a Super Master Ouyang also can only acts!

Then， Try to restore the display of hidden files or browser tools such as Winrar.exe to browse hard disk partitions and folders, focus on removing the system under the Autorun.inf and ravmon.exe,windows root directory of Mdm.exe virus programs, then svchost.exe can only dry Hurry!

Finally, focus fire to Svchost.exe launched the attack, start Task Manager, the process Svchost.exe killed, and then set the heart of the Windows root directory svchost.exe deleted. After these things, anti-virus software can be normal work, the hard drive inside the virus developed small all clear clean.

What needs to be explained is that the system has banned the AutoPlay function of all drives before poisoning. Verify that there are no viruses and then cancel the disk quota settings. Otherwise, when surfing the Internet or installing the program, ... Hey, don't say much.

Original works: Www.qin3.com