How to manually remove USB flash drive virus, USB flash drive virus manual cleaning method

Step method: First, right-click to open one of the infected drive letters, --- folder options in the toolbar - view the next selection to show all files and folders, and remove the check mark before hiding protected system files, you will find that there is one more file under the drive letter, open it to see the following:

autorun]

open= means that when you double-click the drive letter, the virus program file written to the registry will be automatically opened, and even if the virus is killed, the registry information will still be there, which is why the drive letter cannot be opened.

Second, delete the residual information of the virus in the registry: enter regedit to open the registry program in the start --- run, ctrl+f to open the find command, enter, click search, and then find this key value in the registry.

Generally, under the Hkey Current User Software, Microsoft Windows, CurrentVersion, Explorer, Mountpoints, U Disk Home.

Finally, if the drive letter F drive of the mobile hard disk cannot be opened, then this key value will be found under the hkey current user software Microsoft Windows CurrentVersion Explorer mountpoints fshellcommand, delete the shell subkey, F3 find the next one, and repeat the operation until all are cleared.

The full name is :, abbreviated as such a virus, this virus works on the 32-bit Windows platform. The virus generates files in the root directory of the hard drive.

The specific manifestation of the virus is that when you double-click the drive letter of the hard disk, the system will call the contents of the file automatically ** the hard disk as a way to spread the virus. In addition, viruses can be transmitted through removable storage media (USB flash drives, portable hard disks).

Although most antiviruses can kill it! But the symptoms of infection persist. When the antivirus software performs anti-virus, double-clicking will also not open the drive letter, and you must right-click to browse the hard disk.

First of all, right-click to open one of the infected drive letters, in the toolbar--- folder options - look at the next check to show all files and folders, and remove the check box before hiding protected system files, you will find that there is one more file under your drive letter, open it we can see the following: [autorun] open= This sentence means that when you double-click the drive letter, the virus program file written to the registry will be automatically opened, even if the virus is killed, but the registry information is still there, which is why the drive letter cannot be opened. Generally, under the hkey current user software microsoft windows currentversion explorer mountpoints Finally, if the drive letter f drive of your portable hard disk cannot be opened, then you will be in the hkey current user software Microsoft Windows currentversion Explorer MountPoints FshellCommand, delete the shell subkey, F3 find the next one, and repeat until all are cleared.