Win7 System Computer folder all become EXE file how to change back?
Symptoms of poisoning:
1, each disk folder is changed to EXE file, in fact, this EXE file is not a real folder, it just disguised itself as a folder, if we do not display the extension in the display, you will not know it is EXE file, and the real folder is just hidden.
2, open Task Manager we will find that in the process of more than two processes, one is Kiss.exe, one is kissme.exe the two processes can not be terminated, if it could be terminated, the virus can be basically deleted manually, but now seems to have been unable to solve the problem.
3, the generated camouflage folder can not be deleted, the so-called cannot be deleted is that you put the disguise of the folder deleted, as long as the refresh or wait a few seconds will be restored, here because its process has been running, so delete just in vain.
Workaround:
Third party software Antivirus
into Safe Mode antivirus, you can download 360 security guards for a comprehensive scan, clear the stubborn Trojan virus, these are caused by disinfection, installation 360 open in addition to the ARP firewall (can be opened according to individual) the rest of the real-time protection, do not worry.
Manual Cleanup method
1, end the virus process. Open Super Patrol, select Process management function, terminate process Xp-290f2c69.exe (8-bit random), Winvcreg.exe,2080.exe (random name).
2, delete the virus in the System32 generated by the following files: Com.run dp1.fne eapi.fne internet.fne krnln.fnr og.dll Og.edt regex.fnr fne spec.fne Ul.dll F2c69. EXE Winvcreg.exe 2080.EXE (random name).
3, delete the virus startup items, delete the following startup items: "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" in the Xp-290f2c69.exe (after 8-bit random); C:\Documents and settings\administrator\"start". lnk "in" menu \ Program \ Startup ".
4, click "Start"-"Run"-enter "cmd", enter the command prompt, and then enter the root directory of your U disk, the specific operation as follows, such as your U disk letter bit G, then run the following command (the first line of "G:" for your U disk letter):
CD/D G:
for/f "delims="%a in (' dir/b/ad ') does (del/a/f/q "%a.exe")
for/f "delims="%a in (' dir/b/adh ') does (attrib-s-h-r "%a")