There is an additional file in my C drive WINDOWS root directory. It will be automatically generated after each deletion, and a process named SVCHOST is generated. Since I got this, all my folders are invisible. Even if I select "Show all files and folders" in the settings, it will be useless to turn off "Hide protected system files". What's going on?
I encountered this virus yesterday! The problem was solved in the end (of course not formatting the hard disk)
After getting involved in this virus, two files will be generated in the root directory of each partition, namely, and (this file is relatively large) and the attribute is a hidden attribute, and in c:\windows, and (some files will be generated under c:\windows\system32) At the same time, self-start and system services will be added to the startup item to achieve self-start. At least 3 key values will be written in the registry!
At this time, your computer may have the "Show all file options" invalid (this is my computer). Now let's talk about the method to clear it:
First, you need to end the process (be sure to end the process first. If it doesn't end, you delete the key value of the registry or the key value in the startup item will automatically recover in less than a minute). Then you can enter the command prompt ("Program"-->Attachment"-->Command Prompt" of the "Start" menu), and then run the following command
I encountered this virus yesterday! The problem was solved in the end (of course not formatting the hard disk)
After getting involved in this virus, two files will be generated in the root directory of each partition, namely, and (this file is relatively large) and the attribute is a hidden attribute, and in c:\windows, and (some files will be generated under c:\windows\system32) At the same time, self-start and system services will be added to the startup item to achieve self-start. At least 3 key values will be written in the registry!
At this time, your computer may have the "Show all file options" invalid (this is my computer). Now let's talk about the method to clear it:
First, you need to end the process (be sure to end the process first. If it doesn't end, you delete the key value of the registry or the key value in the startup item will automatically recover in less than a minute). Then you can enter the command prompt ("Program"-->Attachment"-->Command Prompt" of the "Start" menu), and then run the following command