To remove a virus that cannot display hidden files

To remove a virus that cannot display hidden files:

Select the "Show hidden Files" option, found a U disk a file flash out immediately and disappeared, and then open the folder option, the discovery is still "do not show hidden files" option. And just found that click on the C, D and other letter icon will open a different window!

Summarize:

I, the illness Description:

1, unable to display hidden files;

2, click on the C, D and other letter icon will open a separate window;

3, with WinRAR view found in C, D and other root directory Autorun.inf and tel.xls.exe two disgusting documents;

4, Task Manager in the application process in a column there is a kill;

5, the boot start item in the SocksA.exe.

II. Solutions:

Use a number of kill tools and DOS under the batch file, are not good, had to DIY. Note that you do not double-click the hard disk partition in the following procedure, and you need to open it with the right mouse button->.

First, shut down the virus process

Look in the Task Manager application for a process that you don't know, such as kill, right--> go to the process, find a process similar to SVOHOST.exe (and possibly some svchost.exe), right-click-> to end the process tree.

Second, show the hidden system files

Start-> Run->regedit

hkey_local_machinesoftwaremicrosoftwindowscurrentversionexploreradvanced

Folderhiddenshowall

Delete the CheckedValue key value, right-click the new->dword value-> named CheckedValue, and then modify its key value of 1 so that you can select Show all hidden files and show system files.

Third, remove the virus

Click the right mouse button on the partition disk-> open, see each disk with Autorun.inf and tel.xls.exe two files, delete it, u disk same.

Four, delete the virus automatically run the item

Start-> run->msconfig-> start-> remove items like Sacksa.exe, SocksA.exe, or open registry run regedit

Hkey_local_machine>software>microsoft>windows>currentversion>run

Delete items similar to C:windowssystem32svohost.exe.

V. Deletion of legacy documents

C:windows with the C:windowssystem32 directory to delete SVOHOST.exe (note that the system has a similar file, icon weird one like the Excel icon is a virus) Session.exe, Sacaka.exe, SocksA.exe and all Excel similar icon files, each folder two, CLS software station www.huacolor.com suggest you don't accidentally delete oh, your own attention. When you restart your computer, it's almost ready.