Urgent! HOW DOES THE WINFILE VIRUS KILL IT COMPLETELY?

The real name of the winfile virus is called: ", because the virus will generate a large number of useless winfile files in the folder during the attack, which will consume a lot of system resources. At the same time, the virus will call Outlook to send messages carrying the virus, which will further infect other machines.

In addition to killing them with antivirus software, the author also tells you how to remove them manually.

Note: "It has system and hidden properties, so when searching, you should select three options: "Search System Folder", "Search Hidden Files and Folders", and "Search Subfolders".

Note: Some of them are original files of Windows, please distinguish them clearly before deleting the useless".

3.Open the registry, look for ", and delete them all.

At this point, the "winfile virus" has been swept away by us.

If only the C disk is checked when reloaded, the poison will not be killed.

Of course, reinstalling the system can kill it, unless the virus is still in another disk. Let's use Kaba to kill and kill viruses first.

The old virus can be killed by a lot of soft killings. Killing tools.

Happy Hour.

Now just find an antivirus software, upgrade the virus database and you can get the top.

As long as it can be detected, it can be killed, and the so-called can't be killed because the virus is running; Running programs cannot be modified or deleted.

Start anew, press and hold F8, enter safe mode, and you can easily kill viruses with antivirus software.

Use anti-virus software to scan

Manual killing is more troublesome

And if it's not done properly, the virus will be restarted every time you open a folder

I've been hit by this virus before, and many antivirus software didn't recognize it at the time, but now I don't know it, and I just formatted my computer at the time.

If more than one drive letter is generated at the same time, it must be deleted.

To start --- run--- enter the cmd ---

Enter cd and then del c: desktopini /f/s/a/qdel d:

desktop_.ini /f/s/a/qdel e:\desktop_.

ini /f/s/a/qdel f:\desktop_.ini /f/s/a/qdel g:

desktop_.ini f s a qdel (all your disks): desktop

ini f s a q I also have a little suggestion to create a new compressed file on the desktop After opening, press F4 to view the subfiles under any folder, and see if there are any other similar desktopsini's files! If so, it is still like the above

The best way to find mStray is to create a new compressed file to check and view

Install a 360-degree one. Kill plugins. Adware. .

And then there's a Kaspersky in 360 degrees. This one works great...I haven't had a virus in my system for 4 months.

It's a very ordinary virus, how can it run naked?

Kaba has one or the other.

Virus name]:

Destruction Method]: This virus uses a folder icon, which is very deceptive. Once the virus runs, it replicates itself in large numbers to other directories.

1. The virus will be displayed when it is run for the first time"this file has been damage!"；

2. Copy yourself to the windows directory and rename it.

3. Modify the registry: hkey local machine software\Microsoft\Windows\CurrentVersion\Run

to achieve its self-starting;

4. Enumerate the disk directories and release the following files in each root directory:

Virus host program.

An IE vulnerability can be exploited to call the""and the property is hidden.

The system is hidden. When browsing a folder in a web mode, the system calls the file, which is called.

, thus activating the virus.

5. Viruses modify the registry, hide system files, hide system-protected files, and hide known extension names.

In this way, the user does not see the and, is hidden with the suffix, and is again a file.

folder icon, the user is very likely to think that it is a folder and click on it.

At the same time, the self-copy generated by the virus in the current path is named in the parent directory or the title of the current window to increase concealment.

6. The virus calls Outlook to send a letter carrying the virus.

Manual removal: (without anti-virus software).

First things first: find the system that notices this.

and hidden files, so everyone should know how.

I can find it, under the system folder), delete it. Modify the registry to remove the corresponding startup items.

Yes: , Note: View-> remove the system.

system protection, remove the hidden)

Delete! Be careful not to delete the wrong ones!

Some are Windows original.

Finally: Find all the [*.] files inside the hard driveexe] file, note: as above), you will find quite a few folders.

Icon-shaped quick rent. exe file, delete all of them.

these documents. Everything is ok!

Remote maintenance services are available.

If you are infected by the virus, find a bridge for me. I'll fix it for you. Fierce pants.

If you don't update the virus database, no amount of good antivirus software will be able to kill the virus.