At present, the U disk virus is very serious. Almost all USB flash drives with viruses have an autorun. inf in the root directory. The shortcut menu has items such as "automatic playback", "Open", and "Browser. Because we are used to double-click the disk to open the disk, but now we double-click the disk, instead of opening the USB flash disk, but enabling the program set in
Situation
All the keys on the right run, and the 8-bit xxxxxx.exe and autorun. inf files appear under each disk.
Virus attacks such as viruses and Trojans are disabled on the Internet, and nod32 and other antivirus methods cannot be enabled.
Software
You cannot view hidden files. solution:
Method 1: Modify the Registry File (Save the following file in OK. reg) and run it.
Copy codeThe Code is as follows: Wi
As you know, the personalized icons of the CD and the designated programs automatically run on the CD after the CD is put into the optical drive are all through the Autorun under the root directory of the CD. if the inf file is set, manually Write Autorun. the inf file is not only troublesome and error-prone, but you c
From: http://blog.3gcomet.com/
Idea: the same name folder and file cannot exist under the same folder at the same time. Today, some people say that the previous ideas are
Create a folder to prevent the execution of autorun. inf virus. The operation is as follows (use the command to create a folder, and the E disk is the drive letter of the U disk ):
E:
MD autoru
Poisoning symptoms:
1. autorun. inf and corresponding virus files under the drive letter of each disk are usually transmitted through mobile storage. Double-click or right-click opening will be poisoned,
2. anti-virus software and system maintenance tools cannot be opened. They are hijacked, including Kabbah, coffee, rising, Sreng, autoruns, and ice blade,
3. If all the anti-virus fields appear on the IE w
Release files
Copy codeThe Code is as follows: % Program Files % \ Internet Explorer \ PLUGINS \ Autorun. inf
% Program Files % \ Internet Explorer \ PLUGINS \ pagefile. pif
% Program Files % \ Internet Explorer \ PLUGINS \ WinNice. dll
X: \ Autorun. inf (X is a non-system disk with other drive letters)
X: \ pagef
When ravmone.exe "...... The mysterious ghost in the root directory, the killer of system security, is called the "USB flash drive virus ". Countless Windows users are focusing on them. This article is a summary of your research on the USB flash drive virus and lessons learned from the fight against the USB flash drive virus.
All systems after Windows 95 have an "Auto Run" function. Read the Autorun. inf fi
Most common USB flash drives are immune to the registry, and directories with special file names are generated on the USB flash drives. Provides an alternative dynamic immune method.
The specific memory string in the Shell32.dll module of the Process Explorer can achieve the dynamic immunity automatically executed by the USB flash drive.
Shell32.dll version: 6.0.2800.1873
Imagebase: 7CD00000
. Text: 7CD8A162 push eax; lpString1. Text: 7CD8A163 call ds: lstrcpynW. Text: 7CD8A169 push offset aAuto
Today, a classmate has a virus in his computer, but there are many important things in the computer, such as virus-style Autorun. INF is a stubborn old virus. As long as the deletion is not clean, it will immediately copy and implant everything in the computer into such a file, which is usually in the root directory, when each drive disk is opened, the virus runs automatically, and is added to each drive di
Today, the autorun. inf folder is displayed under each disk on the computer. You can use this method to quickly delete the folder. If you have any problems, try it.The method is as follows:Assume that the autorun. inf folder is in disk D. The operation is as follows: Open start, select Run, Enter CMD, and open the comm
The Autorun virus is hard to deal.
Let's take a look.
The USB flash drive uses autorun to spread viruses. for the help of the inf file, the virus first copies itself to the USB flash drive, and then creates an autorun. inf. When you double-click the USB flash drive.
First, create a text document under the root directory of the USB flash drive.Then rename it autorun. inf (Be sure to change the suffix)Enter [Autorun] // indicates that the autorun part starts and must be entered.Icon = C. ICO // give the USB flash drive a personalized drive letter icon C. ICO (the icon name can be ch
Source: People's Network
The mysterious ghost in the root directory, the killer of system security, is called the "USB flash drive virus ". Countless Windows users are focusing on them. This article summarizes the research on the USB flash drive virus and the lessons learned from the fight against the USB flash drive virus.
Windows 95 and later systems all have an "Auto Run" function. Read the Autorun. inf
One: Software download and installation
Users can download the software from the black and white network. After downloading the compressed package decompression, double-click the name "AutoFireWall.exe" executable file, pop-up main interface as shown:
Figure I
Second: Software use
Software includes monitoring information, firewall settings, and other modules.
Click "View Monitor Record", will pop up a notepad record.
Autorun virus Firewall
Worker script calls the process,Hazard: it makes people look uncomfortable! There are no other dangers. It is estimated that the prank guy wrote it.Then the Internet found a solution, the URL is as follows http://hi.baidu.com/robertcome/blog/item/0d0ab112a9c7e3cec3fd7831.htmPost firstVirus Autorun. vbs detection and removal methodQ: Recently, there was a strange phenomenon on the machine. After "my computer" is opened, no matter which disk icon is dou
drive (CD-ROM)DRIVE_RAMDISK 6040 h RAM Disk (RAM disk) retains the drive type Not specified for 7180h (Not yet specified drive Disk)The value 0 in the table listed above indicates that the device is running, and the value 1 indicates that the device is not running (by default, windows prohibits the automatic operation of devices such as 80 h, 10 h, 4 h, and 01h. The value accumulation is exactly 95 h in hexadecimal format. Therefore, NoDriveTypeAutoRun "has a default key value of, 00, 0 ).From
1. Run Autorun. BAT to perform drive letter immunity (including USB flash drives)
2. Run de-Autorun.bat to relieve drive letter immunity (including USB flash drive)
3. The fourth line of the Autorun. BAT and de-Autorun.bat filesCodeIn (c d e f g h I j) indicates the drive letter,You can add or delete a drive letter based on your computer.
Welcome to my blog: http://hi.baidu.com/ycosxhack.
By cosine fu
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.