Use the Registry to clear the Office Word document killer virus

Source: Internet
Author: User

Not long ago, when I opened a word file, I encountered a strange thing. I couldn't open a commonly used Word file. There was always a prompt box: "version conflict: cannot open a word file of a later version ". Check again. There are two identical word files in the folder! I tried to check the file extension. It seems that I have encountered the "Word document killer" virus.

The virus searches for Word documents on mobile storage devices such as USB flash drives and network drives, and tries to overwrite the found Word documents to spread them, it also destroys the data of the original document. When a user accidentally clicks a disguised virus, the virus will attack. First, create a list of all the Word documents in the hard disk, delete these files one by one, and modify the registry key value, to hide the extension. In this way, the user cannot view the file extension in any way. The virus can also be automatically loaded into the automatic running file of the USB flash drive. Once the user inserts a virus-infected USB flash drive into the computer, the virus will automatically run, resulting in the disappearance of all Word documents.

However, this word document killer virus is not too "brutal" because it does not completely delete the word documents on the hard disk, but stores the files in the C: windowswj folder. First, change the registry key value modified by the virus. Open Registry Editor, go to hkey_local_machinesoftwaremicrosoftwindowscurrentversionpoliceradvancedfolderhidefileext, change the value of "CheckedValue" to "1", and change the value of "UncheckedValue" to "0 ", now the file extension is displayed. Open the C: windowswj folder, which contains the *. com file with the same name as the lost Word document. Change the extension to "doc" and try to open it!

The file rescue work has come to an end for the time being. Upgrade anti-virus software to thoroughly scan and kill viruses. Otherwise, it will be troublesome to encounter a variant of the "brutal" Word document killer. We recommend that you constantly upgrade the antivirus software virus database and regularly scan the system to prevent problems.


 

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.