求助 - 我的 USB中毒了

[hawlan]

當你重開機後﹐那個 registry 值是否還是 0 ﹖
如果重開機後﹐那個 registry 值又變成 1 ﹐那可能是病毒在重開機後﹐又自動把 registry 改成 1

如果是這樣﹐那你要再把它改成 0 ﹐後﹐不要重開機﹐然後 ﹕
start-->run-->cmd [enter]
進入你的 usb drive ,
edit autorun.inf
你就可以看到這個autorun 到底是執行甚麼命令。

然後把命令記下﹐搜索這些命令是否存在你電腦﹐如果肯定那是病毒﹐就殺掉。
然後再把 autorun.inf 殺掉。

可能你硬碟也中毒了也說不定。

--------------------
如果殺不掉﹐那麼在確定把 registry 值改成 0 後﹐就重開機﹐進入 safemode dos prompt , (不要進到正常 windows,以免病毒又自動改 registry 了。) 照著下面來做。


Type d: (This is the drive letter of USB. It can be e: or f: defending on how many hard disk or cd drive is installed)
- Type attrib -h -r -s autorun.inf
- Type “edit autorun.inf” it will open DOS Editor and display contents as follows
==========================
[autorun]
open=file.exe
shell\Open\Command=file.exe
shell\open\Default=1
shell\Explore\Command=file.exe
shell\Autoplay\command=file.exe
==========================
Take note on the file that it called to open (in above example it is file.exe)

10. Exit DOS Editor and return to command prompt, D:\>
11. Delete the file that was called to open on DOS Editor
- Type del /f /a file.exe

12. Delete autorun.inf file
- Type del /f /a autorun.inf