Situation
All the keys on the right run, and the 8-bit xxxxxx.exe and autorun. inf files appear under each disk.
Virus attacks such as viruses and Trojans are disabled on the Internet, and nod32 and other antivirus methods cannot be enabled.
Software
You cannot view hidden files. solution:
Method 1: Modify the Registry File (Save the following file in OK. reg) and run it.
Copy codeThe Code is as follows: Windows Registry Editor Version 5.00
[HKEY_LOC
Currently, there are many people using mobile storage tools, such as USB flash drives, mobile hard drives, and MP3. At the same time, there will be a crisis. The Autorun virus is one of the most common viruses. Therefore, this article introduces several simple methods to delete the Autorun virus.
First, the symptoms after poisoning are:
Double-click drive letter cannot open, or open a new window, or let you
Today, the autorun. inf folder is displayed under each disk on the computer. You can use this method to quickly delete the folder. If you have any problems, try it.The method is as follows:Assume that the autorun. inf folder is in disk D. The operation is as follows: Open start, select Run, Enter CMD, and open the command line
In the command line window, enter the following command:Step 1: Enter D and
Worm program worm. win32.autorun. DG Solution
Virus name
Worm. win32.autorun. DG
Capture Time
2007-10-14
Virus symptoms
The virus is a worm program written in Delphi. It is 25,600 bytes in length, the icon is a regular executable file icon, and the virus extension is exe.
Virus analysis
After the worm program is activated, the internat.exe file is generated in the % SystemRoot % \ systemdirectory, which is
The network found a autorun virus to kill the firewall and is a green version
A small tool for defense against Autorun virus, it is very convenient for your computer to be in the monitoring Autorun virus. The firewall will intercept the inserted USB device in real time, detect it, and if there is a virus, it will make a simple killing, and then automatically ejec
Down.exe/virus. win32.autorun. Z/Trojan. PWS. maran.262
EndurerOriginal2Added replies from Kaspersky.1Version
When you open a page that is occasionally used in the Forum, rising prompts you to download and run suspicious files.
Search by Google, and Google has already marked it:Http://www.google.cn/search? Complete = 1 HL = ZH-CN newwindow = 1 Q = % E8 % BF % 98% E7 % 8f % A0 % E5 % 8C % Ba + % E6 % 97% A7 % e9 % 9B % A8 % E6 % a5 % BC % E6 % B8 %
" Time (HH:MM:SS) Alarm "Item to set your boot times, such as: 6:30:00, then your computer will be automatically turned on at 6:30 A.M.. After setting, return to the main interface, press F10 key to save your settings. Not all motherboards support this feature, there are some old models of motherboards and some of the kitchen boards do not have this function, you should first look at the motherboard instructions to see if the support of this feature.
Auto Start Program
Automatically started pr
1, "Start" menu "run" in the input regedit, open Registry Editor, expand to Hkey_current_usersoftwaremicrosoftwindowscurrentversion policiesexploer under the primary key, In the right-hand pane, find "NoDriveTypeAutoRun", which is the key that determines whether to perform CDROM or hard disk autorun functions.
2, hit "NoDriveTypeAutoRun", in the default state (that is, you did not prohibit the Autorun func
Solve the autorun And mags. pif viruses in linux-general Linux technology-Linux technology and application information. The following is a detailed description. Yesterday, my computer experienced symptoms of poisoning. After I started the computer, I found that the system time was changed. Then, after double-clicking each system disk, the address book page will appear. I can only right-click it and find two hidden virus files:
Today, a classmate has a virus in his computer, but there are many important things in the computer, such as virus-style Autorun. INF is a stubborn old virus. As long as the deletion is not clean, it will immediately copy and implant everything in the computer into such a file, which is usually in the root directory, when each drive disk is opened, the virus runs automatically, and is added to each drive disk. Then, the virus gradually spreads to each
Prevention Methods: USB flash drives with viruses to your computer and solutions to viruses:
1. When inserting a USB flash drive, press and hold the "shift" key on the keyboard until the message "devices can be used" is displayed. You can release the "shift" key. Do not double-click it when enabling the USB flash drive, do not use context menu.To open a single "open" option, use the Resource Manager(START-allProgram-Attachment-Windows resource manager. After you open the resource manager, you m
The other day, my sister used a USB flash drive to bring back a virus named "autorun Storm" from school. After being poisoned, double-clicking any drive letter will pop up a form, and some Trojans may be downloaded.
Clear method:
Shut down the wscript.exe process in the Resource ManagerShow all hidden files and system filesSearch Autorun .*Delete all searched filesOpen the registry and search "userinit".
At present, the U disk virus is very serious situation. Almost all the virus with the U disk, the root directory has a autorun.inf, right-click menu More "AutoPlay", "Open", "Browser" and other items. Because we are accustomed to using a double click to open the disk, but now we double-click, usually not open u disk, but let the program set up in the Autorun.inf automatically play. The virus will not be activated simply by right-clicking on the Open button. But if you have a lot of people, and c
Compress a DVD by yourself
Nowadays, in the audio and video markets across regions, a type of disc named compressed DVD is becoming popular. A 30-episode TV series can be played on a conventional DVD player with only three DVDs. So many people think that there is a new DVD format. Some media did not conduct any in-dept
Autorun. inf and registry NoDriveTypeAutoRun key values
Binary digits
8
7
6
5
4
3
2
1
Type
1
RAMDISK
CDROM
REMOTE
FIXED
REMOVABLE
NO_ROOT_DIR
UNKNOWN
Name
Memory
Optical Drive
Network ing
Hard Disk
Mobile storage
No drive letter
Unrecognized
Decimal Value
128
64
32
16
8
4
2
1
is also silent Ah, today installed under the latest version of the Webstorm, found special card, the old motionless on the card to die, see the next process, Bull X Ah, git for Windows has been rubbing against the crazy growth, a little to the beginning of the behemoth.Just a minute.This computer can not die ...Manual off the next process, obviously not card, but a will come out again, very depressed .....-----------------------------------------------------Online search, how to disable this pro
Today, I found that the computer was abnormal. I only needed to open the folder on the left side of the Windows resource manager, and the cmd.exe crashed. I checked that w32.downadup. Autorun virus was detected. Although the latest version of Rising antivirus software is installed on the machine, the virus cannot be detected at all. Symantec can detect it, but the Organization's confidential computers do not allow the installation of foreign anti-viru
EndurerOriginal1Version
A netizen said that no matter what website he opened on his computer, the displayed pages were hxxp: // 218.*1 *. 1*4.170 vip1.htm and vip2.htm.
Hxxp: // 218.*1 *. 1*4.170/vip1.htm content is US-ASCII encoded. Download http://purpleendurer.ys168.com encoding decoding to US-ASCIIProgramThe obtained content contains the Javascript script.CodeThe function is to download the file 611.exe, save it as C:/Microsoft.com, and run it.
File Description: D:/test/611.exeAttribute:
Configuration cronCron service every minute not only to read all the files within/var/spool/cron, but also to read a/etc/crontab, so we configure this file can also use the Cron service to do something. The crontab configuration is for a user, while the edit/etc/crontab is a task for the system. The file format for this file is:Shell=/bin/bashPath=/sbin:/bin:/usr/sbin:/usr/binMailto=root//If an error occurs, or if there is data output, the data is sent to this account as an emailhome=///user-ru
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.