Win7 System Computer folder all become EXE file how to change back?

Source: Internet
Author: User
Tags safe mode root directory

Win7 System Computer folder all become EXE file how to change back?

Symptoms of poisoning:

1, each disk folder is changed to EXE file, in fact, this EXE file is not a real folder, it just disguised itself as a folder, if we do not display the extension in the display, you will not know it is EXE file, and the real folder is just hidden.

2, open Task Manager we will find that in the process of more than two processes, one is Kiss.exe, one is kissme.exe the two processes can not be terminated, if it could be terminated, the virus can be basically deleted manually, but now seems to have been unable to solve the problem.

3, the generated camouflage folder can not be deleted, the so-called cannot be deleted is that you put the disguise of the folder deleted, as long as the refresh or wait a few seconds will be restored, here because its process has been running, so delete just in vain.

Workaround:

Third party software Antivirus

into Safe Mode antivirus, you can download 360 security guards for a comprehensive scan, clear the stubborn Trojan virus, these are caused by disinfection, installation 360 open in addition to the ARP firewall (can be opened according to individual) the rest of the real-time protection, do not worry.

Manual Cleanup method

1, end the virus process. Open Super Patrol, select Process management function, terminate process Xp-290f2c69.exe (8-bit random), Winvcreg.exe,2080.exe (random name).

2, delete the virus in the System32 generated by the following files: Com.run dp1.fne eapi.fne internet.fne krnln.fnr og.dll Og.edt regex.fnr fne spec.fne Ul.dll F2c69. EXE Winvcreg.exe 2080.EXE (random name).

3, delete the virus startup items, delete the following startup items: "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" in the Xp-290f2c69.exe (after 8-bit random); C:\Documents and settings\administrator\"start". lnk "in" menu \ Program \ Startup ".

4, click "Start"-"Run"-enter "cmd", enter the command prompt, and then enter the root directory of your U disk, the specific operation as follows, such as your U disk letter bit G, then run the following command (the first line of "G:" for your U disk letter):

CD/D G:

for/f "delims="%a in (' dir/b/ad ') does (del/a/f/q "%a.exe")

for/f "delims="%a in (' dir/b/adh ') does (attrib-s-h-r "%a")

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.