Clear viruses that cannot display hidden files

After you select the "show hidden files" option, you will find that a file on the USB flash drive disappears immediately. When you enable the folder option, the "hidden file not displayed" option is still found. Another window will be opened when you click drive letter icons such as C and D!

Summary:

I. condition description:

1. Hidden Files cannot be displayed;

2. When you click drive letter icons such as C and D, another window is opened;

3rd, when using winrar, I found that the CIDR root directory contains two disgusting files: autorun.infand tel.xls.exe;

4. the application process column in the Task Manager contains an unknown kill;

5. socksa.exe cannot be found in the startup Item.

II. solution:

I used some kill tools and batch processing files under DOS, which were not easy to use and had to be DIY. Note: Do not double-click the hard disk partition in the following process. If you want to open the partition, right-click it and choose> open.

1. Disable virus processes

In the Task Manager application, find a process similar to "kill" that you don't know, right-click the process, right-click it, find the process named "svohost.exe(you can also upload a svchost.exe), right-click it, and choose" End Process tree.

2. Display hidden system files

Start-> Run-> regedit

Hkey_local_machinesoftwaremicrosoftwindowscurrentversionpoliceradvanced
FolderHiddenSHOWALL
 

Delete the CheckedValue key, right-click New> Dword value> name it CheckedValue, and modify its key value to 1, in this way, you can select "show all hidden files" and "Show System Files ".
3. Delete viruses

Right-click a partition disk and choose "open" from the shortcut menu. The autorun. inf and tel.xls.exe files are displayed in each disk and directory, and the USB flash disk is deleted.

4. Delete automatic run items of Viruses

Start-> Run-> msconfig-> Start-> delete items such as ipvsacksa.exe1_socksa.exe, or open the Registry to Run regedit.

HKEY_LOCAL_MACHINE> SOFTWARE> Microsoft> Windows> CurrentVersion> Run
 

Delete an entry similar to C: WINDOWSsystem32SVOHOST.exe.
5. Delete legacy files

C: WINDOWS, C: WINDOWSsystem32, and all files with excel icons. There are two folders. Do not delete them by mistake. Pay attention to this. After the computer is restarted, it is okay.