I have one more MDM.EXE file in my C-disk Windows root directory, it is automatically generated each time it is deleted and produces a process named Svchost, and since this is all my folders are not visible, even if you select Show all files and folders in the settings, turn off the Hiding protected system files is useless. What the hell is going on?
I met the virus yesterday! The final problem was solved (not formatted hard drive, of course)
After this virus, two files are generated in the root directory of each partition, respectively, Autorun.inf and Ravmon.exe (this file is larger) and properties are hidden, and MDM.exe and Svchost.exe are generated under C:\Windows. Svchost.ini, (some of which generate a Skvp.sys file under C:\Windows\System32) also adds the boot and add to the system service implementation from the startup. and write at least 3 key values in the registry!
At this point your computer is likely to "Show all file Options" Invalid (My computer is the case), OK now say the method of elimination:
First of all, to the process Svchost.exe end (must first put the SVCHOST.EXE process end, not the end, you delete the registry key value or startup key values in less than a minute will automatically recover). You can then go to the command prompt (Start menu, "-->" attachment "-->" command Prompt), and then run the following command
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.