瑞星卡卡安全论坛

:kaka16:

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

附件: 新建 文本文档.txt

该用户帖子内容已被屏蔽

lz可以开启显示隐藏文件和系统文件后，删除各个分区跟目录下的autorun.inf和rundll32.exe


Autorun.inf
[C:\]
[AuToRun]
open=RunDll32.exe .\Thumbs.lnk,GetPic
shell\open=打开(&O)
shell\open\Command=RunDll32.exe .\Thumbs.lnk,GetPic
shell\open\Default=1
shell\explore=资源管理器(&X)
shell\explore\Command=RunDll32.exe .\Thumbs.lnk,Explorer
[D:\]
[AuToRun]
open=RunDll32.exe .\Thumbs.lnk,GetPic
shell\open=打开(&O)
shell\open\Command=RunDll32.exe .\Thumbs.lnk,GetPic
shell\open\Default=1
shell\explore=资源管理器(&X)
shell\explore\Command=RunDll32.exe .\Thumbs.lnk,Explorer
[E:\]
[AuToRun]
open=RunDll32.exe .\Thumbs.lnk,GetPic
shell\open=打开(&O)
shell\open\Command=RunDll32.exe .\Thumbs.lnk,GetPic
shell\open\Default=1
shell\explore=资源管理器(&X)
shell\explore\Command=RunDll32.exe .\Thumbs.lnk,Explorer