Tips for manually clearing hidden virus files

Welcome to the Windows community forum and interact with 3 million technical staff. When you choose the "show hidden files" option, you will find that a file on the USB flash drive disappears immediately, when the folder option is opened, it is found that the option "hidden files are not displayed. In addition, a window will be opened when you click drive letter icons such as C and D.

Welcome to the Windows community forum and interact with 3 million technicians> after you select the "show hidden files" option, I found that a file on the USB flash drive disappears immediately. When I opened the folder option again, I found that the option "hidden files are not displayed" is still found. In addition, a window will be opened when you click drive letter icons such as C and D.

Welcome to the Windows community forum and interact with 3 million technicians>

When you select the "show hidden files" option and find that a file on the USB flash drive disappears immediately, and then open the folder option, the "hidden file not displayed" option is still found. Another window will be opened when you click drive letter icons such as C and D!

Condition description:

1. Hidden Files cannot be displayed;

2. When you click drive letter icons such as C and D, another window is opened;

3rd, when using winrar.exe, we found that the CIDR root directory contains two files: autorun.infand tel.xls.exe;

4. the application process column in the Task Manager contains an unknown kill;

5. socksa.exe cannot be found in the startup Item.

Solution:During the following process, do not double-click the hard disk partition. If you want to open the partition, right-click it and choose open.

1. Disable virus processes

In the Task Manager application, find a process similar to "kill" that you don't know, right-click the process, right-click it, and find the process that runs svohost.exe(a svchost.exe can also be created), right-click it, and choose "End Process tree.

2. Display hidden system files

Run regedit and find the HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ explorer \ Advanced \ Folder \ Hidden \ SHOWALL branch. Then, double-click the CheckedValue key in the window on the right, change its key value to "0". If you do not have this key value, you can create a new "DWORD Value" named "CheckedValue" by yourself ", then, change the value to "0.

3. Delete viruses

Right-click the partition disk and choose open from the shortcut menu. The autorun.infand tel.xls.exe files under each directory are displayed, and the USB flash disk is the same.

4. Delete automatic run items of Viruses

Start> RUN> msconfig> Start> Delete the sacksa.exe1_socksa.exe or open the Registry to Run regedit.

HKEY_LOCAL_MACHINE> SOFTWARE> Microsoft> Windows> CurrentVersion> Run

Delete items similar to C: \ WINDOWS \ system32 \ SVOHOST.exe.

5. Delete legacy files

C: \ WINDOWS, C: \ WINDOWS \ Documents, and all files with excel icons. Each folder contains two files. Do not delete them by mistake. After the computer is restarted, it is okay.