How to remove AUTO poison, a simple way

Super Patrol's USB flash drive virus immunity.

This tool can perform a special immune treatment on the selected disk, so that its auto-run feature is completely disabled, so as to avoid the virus automatically executing immediately after the poisonous mobile disk is inserted into the machine. The tool also has the features of repairing the system disk association and canceling the automatic operation of the system, which completely solves the symptoms that some antivirus software cannot open the disk after virus killing.

Note: If no disks are selected, additional functions will be performed, i.e., the Repair Disk Association and Deactivate System Autorun feature.

Install a Kaba, and the auto will be gone.

Go online for the next antivirus software. Very small.

Probably a few hundred kb.

Auto kill, if you want, I'll give it to you.

Create a new notepad txt file, copy and paste **.

echo on

taskkill /im /f

taskkill /im

start reg add hkcu\software\microsoft\windows\currentversion\explorer\advanced /v showsuperhidden /t reg_dword /d 1 /f

start reg import

del c:\autorun.* /f /q /asdel %systemroot%\system32\autorun.* /f /q /as

del d:\autorun.* /f /q /asdel e:

autorun.* /f /q /asdel f:\autorun.

f /q /asdel g:\autorun.* /f /q /asdel h:

autorun.* /f /q /asdel i:\autorun.

f /q /asdel j:\autorun.* /f /q /asdel k:

autorun.* /f /q /asdel l:\autorun.

f /q /asstart

Finally, change the format to bat format and open it.

Go under the auto kill and panda burn incense.

If there is a restart.

Then you take it to the computer store and reinstall the system.

Clear with Qihoo 360.

Or delete it from the registry.

Viruses mainly run in the [registry].

This virus mainly damages the hard drive.

Sometimes the hard drive won't open, it's caused by this virus, and if you really can't help it, it's even simpler.

Create two files with text and change the file name to a virus file name, and then go to the registry to find viruses to delete.

Put the name of the created file over the virus file.

Finally, delete the [Overwrite Virus Files] that you created

In these two days, there are countless people with this virus!

I just solved it

First of all, don't use ghost recovery, and don't reinstall the system, it's useless!

Since the virus kept changing its name, and according to what they said, they couldn't find any file in the D drive, so they finally found a simple way to shout Fang Yanchang.

1 If there is a type of hidden file under each partition, delete it and restart the computer.

2 Re-set the opening method in the file type (take XP as an example). Open My Computer Tools - Folder Options - File Types Find "Drive" or "Folder" (choose which one according to the problem you are encountering If it is a double-click that cannot open the drive, select "Drive" If you can't open the folder, select "Folder"), click "Advanced" below - click "New" in the "File Type" - fill in "open" in the operation (this can be filled in at will) - fill in the application used to perform the operation, and then return to the "File Type" window, Check open-set as default-OK (see illustration) Now open the partition or folder and see if it has returned to normal?

3 Registry Law:

a For partitions, you can't double-click the opener.

Open Hunger Wild Start - Run Regedit Find [hkey classes root drive shell] to delete all under the shell Then close the registry Press keyboard F5 to refresh Double-click the partition to see again.

b For folders, you can't double-click the opener.

Start-Run Enter regedit to find [hkey classes root directory shell], delete all under the shell, then close the registry, press keyboard f5 to refresh, double-click the partition and look again.

4 Mini Program Solution.

Copy the = sign to the notepad (not including =), save it as, double-click to run, if the antivirus software pops up a warning, let it go.

set wshshell = "")

p1 = hkey classes root directory search shell"

p2 = none"

p1, p2

p1 = hkey_classes_root\drive\shell\"

p1, p2

x = "regsvr32 /i /s ",4,true)

set wshshell = nothing

mybox = msgbox("folders will now open when double clicked", 4096, "finished!")

Of course, this is just a beginner's work, and the latest software has to be tested until it is killed!! Hehe, I'm going to continue looking for a little poison

Go to the next security guard, scan the Trojan first, and after finding the auto virus, the following will prompt you to kill the next special killing tool, and it's OK to kill it directly.

You are using the system disk (default C drive), and the auto virus will often create files in other disks to call the virus. When you finish reinstalling the machine, double-clicking on the other disk will re-infect it.

So after reinstalling the machine, don't double-click any drive letter, open cmd in the dos interface, and use (dir, attrib -a -s -r -h, del f commands).

Find the file in each drive letter and delete it along with the corresponding virus file or other weird names. exe file).

All disks are formatted,There should be no problem.,If there is another one, there may be a problem with the ** on you.。 Now 8 out of 10 ** are trojaned. What a way?

Go to the USB flash drive, open the hidden files, and delete all the hidden files displayed.

If you get into the computer, it's a little more troublesome.

With 360 Security Guard, it's very simple, just scan it, use it for free, and.

With 360 degrees, I just finished killing. Super easy to use.

This may be due to the virus in your machine, the result of the virus. This virus has a volume label file under each drive, as long as you double-click on the drive, the virus will be activated, we need to delete this file manually, under the "command prompt" type "attrib -s -h -r" to remove its "system", "read-only", "hidden" attributes, so enter "del".

before it can be deleted. Then go to the registry to find the "key-value key", and delete the entire shell sub-key after it is found.

The specific solution is as follows (take disk D as an example):

Start --- run --- cmd (open the command prompt).

d: dir a (without argument a is not visible, a is to show everything).

At this time, you will find a file, attrib -s -h -r to remove the system, read-only, hidden attributes of the file, otherwise it cannot be deleted, del is not over here, because you double-clicked the d drive letter did not open but got an error. Asking for positioning, at this time the information that runs automatically has been added to the registry. The following is to clear the relevant information from the registry:

Start running.

regedit

The first thing I found was the automatic operation of the D drive, deleting the entire shell subkey.

Complete. Repeat the above operation several times to fix the problem with other drives, the registry information is together while deleting the D drive.

Shell open autorun was deleted by the way.

Auto is generally hidden, create a new compression software in the U disk or hard disk partition with Auto, and then double-click, Auto will be displayed, just delete it.