Delete sxs.exe virus manually

Do not double-click the partition disk in the following process. If you need to open the partition disk, right-click it.

1. Disable virus processes

CTRL + ALT + DEL Task Manager. In the process, locate sxs or svohost (not svchost, but a letter different from each other). If yes, end the task.

2. Display hidden system files

Run -- regedit

HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/Explorer/advanced/folder/hidden/showall, change the checkedvalue to 1

Note that the virus will delete the valid DWORD Value checkedvalue, create an invalid string value checkedvalue, and change the key value to 0! It is useless to change this to 1. (Some virus variants will delete the checkedvalue directly. You only need to re-create one as follows)

Method: Delete the checkedvalue, right-click New -- DWORD Value -- name it checkedvalue, and modify its key value to 1, in this way, you can select "show all hidden files" and "Show System Files ".

In the folder -- tools -- folder option, set system files and hidden files to display

3. Delete viruses

Right-click the partition disk and choose "open". The autorun. inf and sxs.exe files are displayed in each disk and directory and deleted. (You also need to modify the table entry in the registry)

4. Delete automatic run items of Viruses

Open the registry and run -- regedit

HKEY_LOCAL_MACHINE> Software> Microsoft> Windows> CurrentVersion> RUN

The soundmam key value is found. There may be two. Delete the key value C: // Windows/system32/svohost.exe

Finally, delete svohost.exe or sxs.exe in the C: // Windows/system32/directory.

After restarting the computer, you can find that the anti-virus software can be opened, and the partition disk can be opened by double-clicking.