How to clear a hidden virus file

Select the "Show hidden Files" option, found a U disk a file flash out immediately and disappeared, and then open the folder option, the discovery is still "do not show hidden files" option. And just found that click on the C, D and other letter icon will open a different window!

　　I. Description of the illness

1, unable to display hidden files;

2, click on the C, D and other letter icon will open a separate window;

3, with WinRAR view found in C, D and other root directory Autorun.inf and tel.xls.exe two disgusting documents;

4, Task Manager in the application process in a column there is a kill;

5, the boot start item in the SocksA.exe.

　　II. Solutions

Use a number of kill tools and DOS under the batch file, are not good, had to DIY. Note that you do not double-click the hard disk partition in the following procedure, and you need to open it with the right mouse button->.

First, shut down the virus process

Look in the Task Manager application for a process that you don't know, such as kill, right--> go to the process, find a process similar to SVOHOST.exe (and possibly some svchost.exe), right-click-> to end the process tree.

Second, show the hidden system files

Start-> Run-regedit-input

Hkey_local_machine\software\microsoft\windows\currentversion\explorer\

Advanced\folder\hidden\showall

Delete the CheckedValue key value, right-click the new->dword value-> named CheckedValue, and then modify its key value of 1 so that you can select Show all hidden files and show system files.

Third, remove the virus

Click the right mouse button on the partition disk-> open, see each disk with Autorun.inf and tel\.xls\.exe two files, delete it, u disk same.

Four, delete the virus automatically run the item

Start-> run->msconfig-> start-> remove items like Sacksa.exe, SocksA.exe, or open registry run regedit

Hkey_local_machine>software>microsoft>windows>currentversion>run

Delete items similar to C:\WINDOWS\system32\SVOHOST.exe.

V. Deletion of legacy documents

C:\WINDOWS\ with the C:\WINDOWS\system32\ directory to delete SVOHOST.exe (note that the system has a similar file, icon weird one like the Excel icon is a virus) Session.exe, Sacaka.exe, SocksA.exe and all Excel similar icon files, each folder two, do not accidentally delete Oh, your own attention. After restarting the computer, the basic is OK.