RSVS.pif special virus detection method introduced

We usually browse the web will inevitably have poisoning situation, but if it is a general virus, the anti-virus software will be solved at once, but if you encounter a special virus, then I have to use a special method. My Windows XP accidentally got a virus. The main phenomenon is that the system time has changed to 2004, NOD32 cannot be started, autorun.inf file appears under each partition, and “start” is in the menu. Multiple programs are highlighted by “new installation”. I originally wanted to reboot into safe mode to kill the virus, but the system will be blue when it boots into safe mode. Excuse me, what is this virus, how to kill it?

From your description, you seem to have a variant of the flash virus RSVS.pif virus, whether it is this virus or not, the best way is to use Windows PE Start the system to boot the system, manually delete the RSVS.pif (hidden files) and autorun.inf files under each partition, and then use the anti-virus software that has been put in, 360 security guards to kill, in this case, even if Other viruses can be detected and killed.

In addition, you can also remove the hard drive and hang it on another computer as the second hard drive (do not open any partition on the hard drive to avoid poisoning). Use the anti-virus software and 360 security guards on the computer to comprehensively kill and clean the second hard disk. Then open “My Computer”, click <;Tools> Menu →“Folder Options”→“View” Tab, Remove “Hide Protected Operating System Files” Front “√” and check “show all files and folders”. After the killing is completed, right click on the partition of the second hard disk → resource manager & rdquo;, enter each partition, delete the “*.PIF” file in the root directory. After installing the hard disk back, remember to change the system time back to the correct time, upgrade NOD32 to the latest virus database, and use 360 ​​security guards to fix the system bugs to ensure that all Windows XP patches are patched. If you are on a LAN, it is recommended to enable the ARP firewall.

However, this virus is generally a virus on the LAN is not too serious, you can still use some special anti-virus software, or use the above tutorial to do it yourself, generally the virus will be innocent Shaped.