Server CPU utilization of 100% has been, in the server before the virus, and all documents suffixes into XTBL format, and then reinstall the system CPU usage has been very high
Svchost this path, and whether the virus in the attack

CodePudding user response:

This is disguised as a system file virus, must find the source of infection can solve the problem, now the situation is easy to determine where is the problem,
Reshipment system does not mean that the virus was done not have, but what is certain is that the virus file will not be implemented, only the process is manual operation, will move again,
The simplest way is: all fell heavily, or reinstall the install antivirus software immediately, scan data partition,
Your server has been heavily, but there is a virus running, that must be manually run virus program, if after loading system did not move a plate of something else, or loading has been completely, and setup disk not clean, after or in the system, brought in the virus, to install the software if after loading system, run the software in the data set, then the data plate with virus file,

CodePudding user response:

That I'm going to do now, that all formatting reshipment system, and then install system usb flash drive is formatted from pure version of Microsoft's official website to download, and it is now may be carried out before meth file, before each boot will pop up a executable file, and then I click ok once, and finally use anti-virus software to clean up, and now I want to how to deal with this situation,, no longer reshipment system, and with 360 antivirus didn't work

CodePudding user response:

You packed with PE system and then use antivirus software antivirus first, don't open the other offer

CodePudding user response:

Find, it's just file attributes set to hide, directly under the command line to knock dir/a can show hidden files, delete word del file name can be deleted

In addition to open the task manager, point [process] TAB, in the [view] - [select column] the ticked on the command line, so you can see the program path, path more suspicious is probably a virus,

There is powered up, knock msconfig has set the startup

CodePudding user response:

With that kind of antivirus software

CodePudding user response:

Put the plate of low, the guarantee was done not have