Select the "Show hidden Files" option, found a U disk a file flash out immediately and disappeared, and then open the folder option, the discovery is still "do not show hidden files" option. And just found that click on the C, D and other letter icon will open a different window!
I. Description of the illness
1, unable to display hidden files;
2, click on the C, D and other letter icon will open a separate window;
3, with WinRAR view found in C, D and other root directory Autorun.inf and tel.xls.exe two disgusting documents;
4, Task Manager in the application process in a column there is a kill;
5, the boot start item in the SocksA.exe.
II. Solutions
Use a number of kill tools and DOS under the batch file, are not good, had to DIY. Note that you do not double-click the hard disk partition in the following procedure, and you need to open it with the right mouse button->.
First, shut down the virus process
Look in the Task Manager application for a process that you don't know, such as kill, right--> go to the process, find a process similar to SVOHOST.exe (and possibly some svchost.exe), right-click-> to end the process tree.
Second, show the hidden system files
Start-> Run-regedit-input
Hkey_local_machine\software\microsoft\windows\currentversion\explorer\
Advanced\folder\hidden\showall
Delete the CheckedValue key value, right-click the new->dword value-> named CheckedValue, and then modify its key value of 1 so that you can select Show all hidden files and show system files.
Third, remove the virus
Click the right mouse button on the partition disk-> open, see each disk with Autorun.inf and tel\.xls\.exe two files, delete it, u disk same.
Four, delete the virus automatically run the item
Start-> run->msconfig-> start-> remove items like Sacksa.exe, SocksA.exe, or open registry run regedit
Hkey_local_machine>software>microsoft>windows>currentversion>run
Delete items similar to C:\WINDOWS\system32\SVOHOST.exe.
V. Deletion of legacy documents
C:\WINDOWS\ with the C:\WINDOWS\system32\ directory to delete SVOHOST.exe (note that the system has a similar file, icon weird one like the Excel icon is a virus) Session.exe, Sacaka.exe, SocksA.exe and all Excel similar icon files, each folder two, do not accidentally delete Oh, your own attention. After restarting the computer, the basic is OK.