There is a new Worm-(Worm. AutoIt. c) disguise using the folder icon:
If you are not viewing the file extension, you may be tempted. Then, your system will become very slow. A virus occupies a high amount of system resources.
1. After the virus runs, the machine speed slows down significantly immediately.
2. right-click the task manager in the status bar and find that the "Task Manager" is disabled (grayed out). When you use ctrl + alt + del to call the task manager, A dialog box is displayed, prompting "the Task Manager is disabled by the system administrator ".
3. My computer-tools-Folder Options. Blocked by virus ("folder option" cannot be found ").
4. Two or more RVHOST. EXE virus processes are displayed in the process. The corresponding path is % systemdir % \ RVHOST. EXE.
5. There is a virus startup Item named "Yahoo Messengger" in the startup item. The corresponding path is % systemdir % \ RVHOST. EXE.
Add the registry run key value and modify the shell to automatically load the virus. The virus program name is rvhost.exe. The virus will copy itself to the Windows directory.
You can use tools to fix disabled registry editors, task managers, and Folder Options.
After Virus intrusion, leave a backdoor to connect to the remote server.