As long as the virus is infected, the computer system will always appear abnormal phenomenon. When these phenomena are discovered, the system should normally be suspected of being infected by viruses. Here are some common anomalies:
The primary boot area, boot sector, file allocation table, or root directory of the disk are modified.
The length or content of the system file has changed.
The disk has a fixed "bad sector" and the disk free space becomes smaller.
Abnormal information is displayed on the screen.
The system boot process obviously slows down, the machine speed is slowed down, and the disk access time becomes longer.
The original normal files on the disk cannot be run or run abnormally.
System devices cannot be used for no reason. For example, the system does not recognize C disk, keyboard suddenly cannot use.
The computer appears buzzing.
The system has an abnormal reboot phenomenon, or it often freezes.
The file length, build date, or property of an executable file (in the form of COM or EXE) changes without cause.
The DOS interrupt vector has changed.
The available memory space becomes smaller.
There are inexplicable hidden files or other files.
When you suspect that your computer system is infected with a virus, you can take the following steps:
(1) Shut down the machine.
(2) Isolate the computer (if connected).
(3) Start with a known-clean, write-protected operating system disk and back up important data information.
(4) Use anti-virus software scan disk, kill virus.
(5) Registration of the virus activity, trigger conditions and all symptoms, notify the relevant computer managers.
(6) Re-boot with a known-clean, write-protected operating system disk.
If the anti-virus software can not kill the virus, all the hard drive can be low-level format, reconfigure CMOS, from a known clean source disk reinstall operating system and other software.
This article from the Internet and the search engine IT Technology blog http://www.guhongtao.com/issued reprint please be sure to indicate