回覆列表
  • 1 # 使用者990540253822

    病毒把真正的檔案隱藏了,並且建立了檔案的快捷方式(一般是exe檔案,有時也有資料夾),而且你的d盤根目錄下一定也有autorun.inf檔案。

    先查詢程序中的病毒程序並結束掉,然後匯入以下注冊表文件1.reg,資料夾選項裡設定隱藏檔案開啟,刪掉有問題的檔案(不能雙擊d盤)

    一下為1.reg

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden]

    "Text"="@shell32.dll,-30499"

    "Type"="group"

    "Bitmap"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\

    00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,\

    48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,34,00,00,\

    00

    "HelpID"="shell.hlp#51131"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]

    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

    "Text"="@shell32.dll,-30501"

    "Type"="radio"

    "ValueName"="Hidden"

    "DefaultValue"=dword:00000002

    "HKeyRoot"=dword:80000001

    "HelpID"="shell.hlp#51104"

    "CheckedValue"=dword:00000002

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]

    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

    "Text"="@shell32.dll,-30500"

    "Type"="radio"

    "ValueName"="Hidden"

    "DefaultValue"=dword:00000002

    "HKeyRoot"=dword:80000001

    "HelpID"="shell.hlp#51105"

    "CheckedValue"=dword:00000001

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]

    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

    "Text"="@shell32.dll,-30500"

    "Type"="radio"

    "CheckedValue"=dword:00000001

    "ValueName"="Hidden"

    "DefaultValue"=dword:00000002

    "HKeyRoot"=dword:80000001

    "HelpID"="shell.hlp#51105"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]

    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

    "Text"="@shell32.dll,-30500"

    "Type"="radio"

    "ValueName"="Hidden"

    "DefaultValue"=dword:00000002

    "HKeyRoot"=dword:80000001

    "HelpID"="shell.hlp#51105"

    "CheckedValue"=dword:00000001

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]

    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

    "Text"="@shell32.dll,-30501"

    "Type"="radio"

    "CheckedValue"=dword:00000002

    "ValueName"="Hidden"

    "DefaultValue"=dword:00000002

    "HKeyRoot"=dword:80000001

    "HelpID"="shell.hlp#51104"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]

    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

    "Text"="@shell32.dll,-30500"

    "Type"="radio"

    "CheckedValue"=dword:00000001

    "ValueName"="Hidden"

    "DefaultValue"=dword:00000002

    "HKeyRoot"=dword:80000001

    "HelpID"="shell.hlp#51105"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden]

    "Type"="checkbox"

    "Text"="@shell32.dll,-30508"

    "WarningIfNotDefault"="@shell32.dll,-28964"

    "HKeyRoot"=dword:80000001

    "RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

    "ValueName"="ShowSuperHidden"

    "CheckedValue"=dword:00000000

    "UncheckedValue"=dword:00000001

    "DefaultValue"=dword:00000000

    "HelpID"="shell.hlp#51103"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]

    @=""

    有很多病毒,為了隱藏自己,就修改系統資料夾設定,使你用常規方法不能看到隱藏檔案。

    請確保在“資料夾選項”中去掉“隱藏已知檔案型別的副檔名”,雙擊執行此檔案,再重新到“資料夾選項”中設定顯示隱藏檔案。

  • 中秋節和大豐收的關聯?
  • 獸類生命排列表?