U disk is infected, the original folder is hidden, the folder is turned into an .exe executable file

All U disks are infected with viruses, the files become .exe executable files, and the hidden friends cannot be canceled. Share my log swiftly and conveniently.

Thanks to the enthusiastic people today for the new procedures that they continue to supply in their replies, which has significantly inspired me and created me fully grasp the virus and its variants additional deeply. This time, I reorganized this log, added several new techniques that every person proposed inside the reply, and adjusted the order of the strategies, sorted based on the degree of recommendation.

1st of all, it is actually suggested that you just conduct a extensive virus check on the pc, to ensure that the source file from the virus within the laptop could be killed, so as to not delete the U disk virus after which make use of the U disk on this pc to be infected with this virus again subsequent time (advised Use Kaspersky anti-virus computer software, because right after my practice, Kaba can fully kill this virus in the computer host, Kingsoft Web Safety will miss a number of this kind of virus, as for other anti-virus software, also No test, I hope you can give me feedback following attempting), this can be the method to root !!!! Needless to say, if it's a single-use computer in the school's laptop area and Internet cafe, this step also can be omitted.

approach one particular:

This is a comparatively very simple strategy, using some software program to help, will not require significantly knowledge of laptop programming registry, appropriate for most students to use, and extremely successful.

Usually do not format this virus for those who are caught, it truly is not essential, give a website http://www.usbcleaner.cn/

That is the official internet site of USBCleaner, download USBCleaner6.0, open USBCleaner, USBCleaner is a software program developed for U disk virus killing, really compact, a compressed package is only 3MB, and supplies a green installation-free version, might be utilized immediately after decompression It is actually advisable which you prepare one particular within your U disk to prepare for a virus comeback ~ (try to remember to upgrade the software version generally) Very first, click the comprehensive test, adhere to the USBCleaner's wizard to verify and kill the U disk virus within the computer system, comprehensive this Immediately after the step, the computer software will prompt to begin to kill the virus within the U disk, in addition to a window will pop up (as shown under)

Operating the detection U disk will prompt regardless of whether to kill the folder icon virus in the U disk, click Yes to fully get rid of the virus that tortured us in the U disk, and after that click to restore the malicious hidden files by the virus (suggested) to force the removal from the folder directory Hidden attributes from the program (employed by novices), OK! These files which are forced to be hidden by the virus will come out. A little bit bit of experience. Inform them to share. Do n’t worry about this virus in a friend subsequent time. The information is not going to be lost! ! ! ! !

Approach Two:

1: Download 360 security guards, it truly is accessible on this common laptop or computer, or other anti-virus application are OK. (Encouraged 360 is due to the fact it truly is comparatively smaller, straightforward to download, do not have to spend for it ...)

2: Use anti-virus to kill the U disk initial, and get rid of the .exe executable viruses

3: Open Notepad and enter WindowsRegistryEditorVersion5.00 [HKEY_LOCAL_MACHINE \\ Software program \\ Microsoft \\ Windows \\ CurrentVersion \\ Explorer \\ Sophisticated \\ Folder \\ Hidden \\ SHOWALL] 'CheckedValue' = dword: 00000001 and save it, then rename the notepad to display the Hidden file .REG, and after that run.

4: Open Notepad and enter for / f 'delims =' %% iin ('dir / ah / s / b') doattrib '%% i' -sh after which save, then rename Notepad to unhide file. bat, and then place it in the root directory on the U disk, that may be, the directory where the U disk is opened, then run. Wait a couple of seconds prior to it starts to unhide the files, then it ’s OK ~~~~ In order to make your U disk no longer impacted by this broken virus, you may have to share it ~~

PS: Every person should normally update the virus database of anti-virus computer software on their computer systems. Do n’t let new viruses benefit from it. Strategy 1 is extremely encouraged, basic and sensible! ~

The following would be the techniques mentioned by several students in their reply. I haven't tried them. Interested students can try it ~

1. Ren Lipeng

2009-04-2411: 27

Reply Zhang Ganlei: The steps will be the usual actions. Very first of all, you have got to understand the mechanism of virus operation, why the virus will run mainly because he binds an automatically operating file, AUTORUN.INF.

Initially, when your computer system isn't poisoned, you insert the poisoned U disk. Then you definitely need to hold down the shift crucial, or disable the auto play function. For the site , create a file known as AUTORUN.INF within the root directory of all your drive letters. hard drive recovery software , in order that this file cannot be automatically copied for your computer's challenging disk, after which you only must right-click and click the U disk to kill the virus. The virus removal is quite uncomplicated, provided that you open the hidden file (the laptop can view the hidden file without having becoming poisoned) to find the virus The executable program and also the automatically operating plan is usually deleted directly. When the virus infects the file, then there isn't any way, you ca n’t know the virus code, you'll be able to only delete the file collectively, for those who feel troublesome, you can directly format the U disk , Just use the information recovery software program to recover the files you'll need, (do not tell me you don't know what application to make use of for recovery).

Second, if your pc has been poisoned, then manually kill the virus, the strategy is still to disable the virus's automatic execution file, and after that delete the virus, all you've to complete would be to build an AUTORUN.INF file, and then view the hidden file (if you cannot view it) , Straight adjust the registry, the system is out there online), then make use of the shortcut key to delete the hidden AUTORUN.INF file, use the shortcut important to test the folder you designed named AUTORUN.INF, the speed is more quickly, for those who do It is possible to do it in much less than a few far more attempts. The principle is to replace the automatic running plan of your virus using the new folder you made, so as to invalidate the automatic operating system. The root directory of each and every drive letter ought to do this, after which download In 1 step, open your registry, get started searching for the virus name, then delete, after which delete the virus file inside the root directory of each of your disks, restart, OK, you've got deleted the virus, some viruses will hang virus code inside your file, spend interest to delete Just drop it. I said it in detail, let's experience it for oneself

2. Wu Yunchao

2009-04-2317: 52

In fact, within the face of this type of trouble, my expertise is also the most beneficial answer I've found so far. What exactly is not correct is that the prevention technique is: usually do not develop a folder. This can be divided into two types: 1. Not stored in the kind of a folder, but straight stored. ; 2. Compress the folder after building the folder. Hey.

three. Wang Chuan

Reply to 2009-04-2112: 57

I do n’t know if every person can see it.

In fact, any time you discover that the files around the USB drive are hidden, your personal computer is currently poisoned. . .

It truly is much better to market prevention information. Take precautions ~

Also, the purpose from the above reg file is to restore registry keys which have been tampered with by viruses. more info isn't very good. They all say that weeding needs to be eradicated.

My ideas are equivalent towards the recommendations within this write-up, but in reverse order. Please kill the virus around the pc, close autorun, update the technique patch, and then wipe out the remaining forces on the USB drive.

ps: These .exe files are viruses operating on your laptop. Following traversing the root directory from the USB drive, the executable plan together with the similar name is generated to continue to infect other computer systems with this USB drive. The icon is very confusing. Make sure to delete!

4. Liu Wei

2009-04-2209: 53

This technique is also cumbersome and basic: initial kill the virus, the file is hidden, then click start off, run, enter cmd, enter your U disk code: (for example G :) enter attrib-ash / s / d, press enter The key is OK!