AUTO appears in the right click menu of the mobile disk

auto solved.

Run -regedit

hkey local machine software Microsoft Windows CurrentVersion Explorer Advanced Folder Hidden Showall, change the checkedvalue key to 1

Note here that the virus will delete the original valid dword value checkedvalue, create a new invalid string value checkedvalue, and change the key value to 0! It doesn't work for us to change this to 1. (Some virus variants will directly delete this checkedvalue, just like the following, and create a new one yourself).

Method: Delete this checkedvalue key, right-click New - DWORD Value - name it as CheckedValue, and then modify its key value to 1, so that you can choose "Show all hidden files" and "Show system files".

In the Folder - Tools - Folder option, set system files and hidden files to display.

3. Remove viruses.

Right-click on a partitioned disk to open it, see that there are two files in each disk and directory, and delete it.

4. Delete the auto-run items of the virus.

Open the registry and run -regedit

hkey_local_machine>software>microsoft>windows>currentversion>run

Find the Soundmam key, there may be two, delete the key where the key value is C: Windows System32.

Finally, delete it in the C: Windows System32 directory or.

After restarting the computer, I found that the antivirus software can be opened, and the partition disk can be opened by double-clicking.

Cut.!I'll take care of it!

Copy the following to Notepad and save it in BAT format.

echo on

taskkill /im /f

taskkill /im

start reg add hkcu\software\microsoft\windows\currentversion\explorer\advanced /v showsuperhidden /t reg_dword /d 1 /f

start reg import

del c:\autorun.* /f /q /asdel %systemroot%\system32\autorun.* /f /q /as

del d:\autorun.* /f /q /asdel e:

autorun.* /f /q /asdel f:\autorun.

f /q /asdel g:\autorun.* /f /q /asdel h:

autorun.* /f /q /asdel i:\autorun.

f /q /asdel j:\autorun.* /f /q /asdel k:

autorun.* /f /q /asdel l:\autorun.

f /q /asstart

Build your own system with Super Bunny ==>> ==>> menu.

Let's see if there is an autorun file on the disk, and delete it if there is.

If not, please see below.

Since August 3, the Rising Global Anti-Virus Surveillance Network has intercepted dozens of "abnormal" malignant viruses. In addition to the usual harms, they can also cause all mainstream antivirus software and personal firewalls to be unable to open, and even cause the system to appear "blue screen", automatic restart, and crash during antivirus. In just two days, thousands of users have been hit by this virus.

On August 4, Rising issued its first orange (Level 2) security alert this year to remind users to be vigilant against such viruses.

At the same time, for such viruses, Rising Antivirus 2006 version has been upgraded to a version that can completely prevent them.

On August 5, Rising released a free killing tool for this virus to the whole society - "Orange August" special extraction and removal tool. This tool clears viruses and their variants such as QQ Pass (Legend Terminator (Mississi) Trojan. All users who do not have anti-virus software installed, or who use other anti-virus software but are infected, can log in to Rising **Free** to use the tool.

Rising will closely monitor the latest trends of such viruses and respond in a timely manner, please pay attention to the latest news of Rising Company**. Users who have been infected with such viruses can also log in.

Open My Computer, Tools menu Folder Options "View" tab.

Uncheck the box in front of "Hide protected operating system files (recommended)" and select "Show all files and folders" to confirm.

Go to the root directory of the E, F, and G drives, find the hidden "autorun" files, delete them, and restart the computer.

Enter regedit in Run to open the registry, and use the Find feature in the registry to look for the Auto ......Find "autorun=auto", "open=auto", startupimagedirectory=f automatic.

What is said upstairs makes sense, there are many reasons for the problem, you can try them in turn! ~~

If you can't kill it, format it!!

Poisoned, it's best to format, and, when you right-click, you should select "Open", don't choose "auto"."

Hello! If there is auto in the right-click shortcut menu, or double-click cannot open the mobile disk or computer hard disk, it is a virus.

Removal method: Create a new notepad file on the desktop, the file name is arbitrary (it is called auto virus killing), copy and paste the following script, and change the suffix to it. BAT file, double-click to run, and the auto in the shortcut menu will disappear.

It's best to keep this script on a mobile device all the time, auto viruses are very common, just run it if you get hit.

echo on

taskkill /im /f

taskkill /im

start reg add hkcu\software\microsoft\windows\currentversion\explorer\advanced /v showsuperhidden /t reg_dword /d 1 /f

start reg import

del c:\autorun.* f /q /as

del %systemroot%\system32\autorun.* f /q /as

del d:\autorun.* f /q /as

del e:\autorun.* f /q /as

del f:\autorun.* f /q /as

del g:\autorun.* f /q /as

del h:\autorun.* f /q /as

del i:\autorun.* f /q /as

del j:\autorun.* f /q /as

del k:\autorun.* f /q /as

del l:\autorun.* f /q /as

start

1.To get started, select: Run.

2.Enter "regedit".

3.in the registry.

4.Sequence all the items with the plus sign "+" in the subdirectory, if there is one item called "command", this is the key! Delete the entire directory of the previous "autorun".

2 ways:

1.I changed the volume label of all disks.

Then refresh it.

That's it. It's okay to change it back to the original.

2.Empty the registry:

Then it's better to set all permissions to deny, then the virus won't be able to tamper with them in the future.

You look at it with 360 Security Guard.

or"My computer"-"tools"-"Folder options"-"File type", find the drive, and then check if there is auto in the opening method, if there is any, you can delete it.

Create a new txt text, put the following things in it, and change the name to make it @echo on

taskkill /im /f

taskkill /im

start reg add hkcu\software\microsoft\windows\currentversion\explorer\advanced /v showsuperhidden /t reg_dword /d 1 /f

start reg import

del c:\autorun.* /f /q /asdel %systemroot%\system32\autorun.* /f /q /as

del d:\autorun.* /f /q /asdel e:

autorun.* /f /q /asdel f:\autorun.

f /q /asdel g:\autorun.* /f /q /asdel h:

autorun.* /f /q /asdel i:\autorun.

f /q /asdel j:\autorun.* /f /q /asdel k:

autorun.* /f /q /asdel l:\autorun.

f /q /asstart

Hard disk auto virus kills.

The auto virus is a problem with this file, delete the attribute after removing it, and then find the file pointed to in the registry, and delete the shell subkey after finding it, and you can open the D drive. Start – Run the input"regedit"(Registry) with"ctrl+f"The key appears for the Find dialog box input""You can see the shell child.

Then right-click - delete or refer to the following method.

1. If there are a class of hidden files under each partition, it is best to restart the computer after deleting them.

2. Re-set the opening method in the file type (take XP as an example) Open my computer Tools Folder Options File Type, find "Drive" or "Folder" (choose which one according to the problem you encounter, if it belongs to double-click and can't open the drive, then select "Drive", and if you can't open the folder, select "Folder"). Click "Advanced" below, "New" in the "File Type" dialog box, and fill in "open" in the operation (this can be filled in at will, if there is "open" and it points to other unfamiliar ones.) The exe file may point to a Trojan, so select """) to fill in the application used to perform the operation, and OK.

Then return to the File Type window, select Open, set it as the default, and OK. Now open the partition or folder again and see if it has returned to normal?

3. Registry Law:

A. For partitions, you can't double-click the opener to start Run Enter regedit, find [hkey classes root drive shell] to delete all under the shell, then close the registry, press keyboard f5 to refresh, double-click the partition and look again.

b. For folders that can't be double-clicked, the opener starts to run Enter regedit, find [hkey classes root directory shell] to delete all under the shell, then close the registry, press keyboard f5 to refresh, double-click the partition and look again.