What is bai VBS virus and how to kill it?

I don't know since when the antivirus software on the computer at home often prompts that there are files infected with viruses If you look closely, it is 3 files C: Windows Help C: Windows Help and C:

windows\system32\cc*.exe here * stands for cc1 ccc1 or something.

At first, he didn't care about playing online games, and he felt that as long as he didn't cause any big danger, it didn't matter, but he hated playing every day. So I thought about it carefully, open it, and see if there is a paragraph inside** open an IP address Obviously, from here** and 2 files, one is a batch file, and the other is a database file, to support batch files, at this time, in the open, I found that there are really a lot of ** in it, the first thing is to check whether there is a computer If there is, it will not be executed, if not, it will be put in c: windows and then when checking, there is and if there is in c:

Windows system32 put and so on anyway it's cc*exe and then load the exe file it put into the process If there is an antivirus software, it will prompt That's why the old prompt for this virus . Now let's see, at present, it's all the viruses behind the guidance, what to do, what is it, I can't find it, it doesn't matter, then change the content inside, I think I don't know if it's judged to cover the problem, so we open it, and then delete all the inside** Write it like this, I don't know if it's right.

delif not exist sfd -

exitif not exist sft -

exitif not exist

exitend

exitdel c:\windows\help\ /q/s

del c:\windows\help\ /q/s

if not exist sfd - sft -

del c:\windows\system32\cc*.exe

if not exist cc*.exe sfd -

exitif not exist sfd - sft -

del c:\windows\system32\cc*.exe

if not exist cc*.exe sfd -

exitend

exit, don't finish writing, modify the attribute to only the degree of archive, just do it. Take a look at Delete and Restart your computer.

There is also an adsl infection that seems to dial automatically. Anyway, I don't care about this, you can see if there is such a phenomenon.

Computer viruses generally need to use anti-virus software to fully disinfect viruses, if you encounter a virus that cannot be killed, you need to analyze what situation:

1. If the virus can't be deleted by the antivirus, check and kill in safe mode, or you can't use the forced deletion tool to delete the file.

2. LAN environment, when the computer is connected to the Internet, the file can be killed, but there is always a total kill, the network can be killed, it belongs to the LAN infected virus, repair the system vulnerability, disinfect the LAN computer, kill it cleanly, and then look at it.

3. In the case of network disconnection, there is still always killing, the virus can be killed but repeatedly written back, indicating that the virus subject has not been checked and killed, and other virus files are constantly released, using the filemon tool, through the monitoring of process actions, find out which process keeps releasing other virus files, and delete the virus subject, if this operation cannot be operated by yourself, please contact the technical customer service of the antivirus software to solve it.