The entire process of Virus File removal through anti-virus recording

After you select the "show hidden files" option, you will find that a file on the USB flash drive disappears immediately. When you enable the folder option, the "hidden file not displayed" option is still found. Another window will be opened when you click drive letter icons such as C and D!

Condition description

1. Hidden Files cannot be displayed;

2. When you click drive letter icons such as C and D, another window is opened;

3rd, when using winrar.exe, we found that the CIDR root directory contains two files: autorun.infand tel.xls.exe;

4. the application process column in the Task Manager contains an unknown kill;

5. socksa.exe cannot be found in the startup Item.

Solution

During the following process, do not double-click the hard disk partition. If you want to open the partition, right-click it and choose open.

1. Disable virus processes

In the Task Manager application, find a process similar to "kill" that you don't know, right-click the process, right-click it, find the process named "svohost.exe(you can also upload a svchost.exe), right-click it, and choose" End Process tree.

2. Display hidden system files

Start running and enter regedit to find

Hkey_local_machinesoftwaremicrosoftwindowscurrentversionpoliceradvancedfolderhiddenshowall

Delete the CheckedValue key, right-click New> Dword value> name it CheckedValue, and modify its key value to 1, in this way, you can select "show all hidden files" and "Show System Files ".
3. Delete viruses

Right-click a partition disk and choose "open" from the shortcut menu. The autorun. inf and tel.xls.exe files are displayed in each disk and directory, and the USB flash disk is deleted.

4. Delete automatic run items of Viruses

Start-> Run-> msconfig-> Start-> delete items such as ipvsacksa.exe1_socksa.exe, or open the Registry to Run regedit.

HKEY_LOCAL_MACHINE> SOFTWARE> Microsoft> Windows> CurrentVersion> Run

Delete an entry similar to C: WINDOWSsystem32SVOHOST.exe.
5. Delete legacy files

C: WINDOWS, C: WINDOWSsystem32, and all files with excel icons. There are two folders. Do not delete them by mistake. After the computer is restarted, it is okay.