Manually clear autoexe virus method[Win11 Solutions]

22 2021-08-17 16:00



  1. End the virus-related process;

  2. Delete all virus-related files based on the above analysis. yodot hard drive recovery full version If you encounter files that can't be deleted, use BingBlade and other forced deletion software to youtube data recovery hard drive delete them;

  3. Delete one by one according to the registration form analyzed above;

  4. Restart youtube windows 10 create recovery usb the computer, there should be no problem.

  Destruction method:

  The virus written in VB, once run, yumi multiboot usb creator ultimate recovery the virus will copy itself to the following directory<以win98为例,其它系统也在相应目录>:

  C:PROGRAM copy recovery partition to usb FILESAUTO.EXE

  C:WINDOWSALL USERSDESKTOPSYSBOY.EXE

  C: WINDOWSALL USERSSTART MENUPROGRAMS start data recovery dead hard drive AUTO.EXE

  C:WINDOWSDESKTOPSYSGRIL.EXE

  C:WINDOWSSTART MENUPROGRAMS start AUTO.EXE

  Modify the registry as data recovery external hard drive data recovery run from usb follows:

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

  "%CURDIR%SYSBOY.exe"

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

  RunServicesExplorer

  "%CURDIR%SYSBOY.exe"

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

  "C:Program data recovery wizard bootable usb Filesauto.exe" easy usb data recovery software erase usb data recovery license

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

  "%CURDIR%SYSBOY.exe"

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

external hard drive recovery key   HKLM\SoftwareMicrosoftWindowsCurrentVersion

  "%CURDIR%SYSBOY.exe"

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

  Runservicesoncerundll32

  "%CURDIR%SYSBOY.exe"

  HKLM\SoftwareMicrosoftWindowsCurrentVersion

  Runservicesoncerundll64

  "%CURDIR%SYSBOY.exe"

  HKCU\SOFTWAREMICROSOFTWINDOWSCURRENTVERSION

  POLICiESSYSTEMdisableregistrytools

  0x external hard drive recovery reviews external hard drive recovery revuiews -->The use of registry tools is free external hard drive recovery prohibited

  HKLM\SOFTWAREMICROSOFTWINDOWSCURRENTVERSION

  POLICiESEXPLORERnofolderoptions

  0x -->Prohibit to open the free usb recovery software license folder option

  HKCU\SoftwareMicrosoftWindowsCurrentVersion

  Policieswinoldappnorealmode

  0x hard drive data recovery software -->Prohibit to enter real mode

  HKCU\SoftwareMicrosoftInternet Explorer

  "" --> Modify IE default page

hard drive recovery software download   HKCU\SoftwareMicrosoftInternet Explorer

  Mainfirst home page

  "" --> Modify IE default hard drive recovery software free page

  HKLM\SoftwareCLASSESDirectoryshell

  Winamp.Playfirst home page

  "Play with hard drive recovery software license Winamp(&p)"

  HKLM\SoftwareCLASSESDirectoryshell

  Winamp.Playcommandfirst home page

  "C:WINDOWSauto.exe"

  HKLM\SoftwareCLASSESDirectoryshell

  Winamp.Enqueuefirst hard drive recovery software review home page

  "&Join Winamp Queue(&E)"

  HKLM\SoftwareCLASSESDirectoryshell

  commandfirst hard drive recovery software with home page

  HKLM\SoftwareCLASSESDirectoryshell

  Winamp.Bookmarkfirst make a recovery usb drive home page

  "Add to Winamp's Bookmark List(&B)"

  HKLM\SoftwareCLASSESDirectoryshell

  commandfirst recovery wizard formatted hard drive home page

  HKCR\txtfileshellopencommandfirst home page

  "%CURDIR%SYSBOY.exe"

  HKCR\swffileshellopencommandfirst recoveryrobot hard drive recovery v1 home page

  HKCR\mp3fileshellopencommandfirst home page external hard drive remo hard drive recovery software Home

  HKCR\dllfileshellopencommandfirst home page

  HKCR\htmfileshellopencommandfirst home page

  "%CURDIR%SYSBOY.exe"

  The seagate hard drive recovery promo virus will also automatically connect to the website:

  This is a virus that uses systools hard drive data recovery the Internet to spread illegally to defraud money, the so-called "Fourth Media" --> spread website usb data recovery software with information in the form of a virus and advertise for itself.

  After the virus is running, a circular usb data recovery tool with window will be displayed in the lower right corner of the system. After clicking it, a rectangular usb drive data recovery software window will pop up, displaying advertising information. If this virus is found, it is recommended to usb flash drive data recovery use a firewall to block port 135.

·