Manually clear the hidden virus files in the operating system

Select the "Show hidden files" option, found that a file flashed out of the U disk and disappeared immediately, and then open the folder option, found that still This is the option "Do not show hidden files". And just found that when you click the C, D and other drive letter icon will open a separate window!
I, condition description

1, can not display hidden files;

2, click C, D When the drive letter icon is opened, a window will be opened;

3. When viewing with WinRAR, it is found that there are two disgusting files: autorun.inf and tel.xls.exe in the root directory of C, D, etc.;

4, there is an inexplicable kill in the application process column of the task manager;

5, there is a confusing SocksA.exe in the boot startup item.

II, solution

Using some special killing tools and batch files under DOS, it is not good, I have to DIY. Note that in the following process, do not double-click the hard disk partition. When you need to open it, use the right mouse button -> to open.

First, close the virus process

In the task manager application, look for processes like kill that you don't know, right-click to go to the process and find something like SVOHOST.exe (may also Is the process of a svchost.exe), right-click; end the process tree.

Second, show hidden system files

Start->Run_regedit-Enter A&]fP!

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\windows\\CurrentVersion

\\explorer\\Advanced\\Folder\\Hidden\\SHOWALL

Delete the CheckedValue key, right click New -> Dword value -> Name it CheckedValue, then modify its key value 1, you can choose to "show all hidden files" and "display system files."

Third, delete the virus

Right click on the partition disk -> Open, see two files autorun.inf and tel.xls.exe in each directory , delete it, the same U disk.

Fourth, delete the automatic running of the virus

Start -> Run -> msconfig -> Start -> delete items like sacksa.exe, SocksA.exe, or Open the registry and run regedit

HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\

CurrentVersion\\Run

Delete items like C:\\WINDOWS\\system32\\SVOHOST.exe.

V. Delete legacy files

C:\\WINDOWS\\ Delete SVOHOST.exe with C:\\WINDOWS\\system32\\ (note that the system has a similar file, the icon is weird and similar to Excel) The icons are viruses) session.exe, sacaka.exe, SocksA.exe and all excel-like icons, two folders per folder, don't delete them by mistake, pay attention to yourself. After restarting the computer, it is basically OK.