At 10 pm on January 13, a virus called incaseformat swept all major comment circles on Weibo. This seemingly new type of virus suddenly occupied the user’s computer, and all the disks except the C drive appeared to be affected. A sign of emptying, even if there is a folder, the folder must contain a file called incaseformat.txt.
So what is the origin of this virus, what harm does it do to computers, and how we can solve the harm caused by this virus. Next, I will clarify one by one.
1. What is an incaseformat virus?
Incaseformat virus: a type of worm virus that can survive on mobile storage devices for a long time. The mobile devices we commonly use include U disks and mobile hard drives, which will become the host of incaseformat.
Transmission method: Due to the parasitic nature of the worm virus, it can use mobile devices to transmit between different computers, causing multiple computers to be poisoned and spreading the virus quickly.
2. Symptoms
As mentioned at the beginning of the article, incaseformat is a very aggressive virus. The following are the three major manifestations of the incaseformat virus in the computer:
1. Except for the C drive, the other disks in the computer will be empty.
2. Except for the C drive, the other disks in the computer are not in the empty state, but the existing folder must contain an incaseformat.txt file. The capacity is 0kb.
3. Except for the C drive, the folders in the other disks in the computer are still there, but the format of these folders has been tampered with, showing the format of the exe executable file, and the capacity is unified to 899kb.
3. Virus harm
This type of virus is a type of worm. According to incompletely reliable sources, this type of virus has existed on the market as early as 2014, but with its tenacious viability and long incubation period, it has been buried until now. There was a large-scale outbreak.
The incaseformat virus is very harmful to the computer. Once incaseformat is hit, the files in the computer except the C drive will appear (1) be emptied and (2) the format has been tampered with. These two destructive damages.
4. Countermeasures
If the virus has been caught, the first thing the user must not do is restart the computer! Restarting the computer will cause unpredictable losses.
Don't restart the computer! Don't restart the computer! Don't restart the computer!
We can do the following:
1. End the process C:\windows\ttry.exe
2. Delete the tsay.exe and ttry.exe in the file C:\windows\ directory
3. Restore the booklet and hide the file and close HKET_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
HKET_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden
HKET_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\checked
4. Use HI format data recovery master to restore partition files
After the computer data is lost, we can use Hi Format Data Recovery Master to restore a partition file. If there is a problem, we can consult an engineer.
5. Preventive measures
There are still many users whose computers are safe, but they will inevitably be infected with incaseformat virus. How can we prevent such viruses from infecting computers? Here are the following preventive measures:
1. It is recommended to install Tinder security software. At present, I have tested the situation of various anti-virus software and viruses on several computers that I use. Tinder security software is currently the anti-virus software that can kill the incaseformat virus. Other software, especially Rogue anti-virus software makes me feel like I have been hit by another virus.
2. It is recommended to set the suffixes of hidden files and displayed files. The purpose of setting the suffix is to warn us to avoid opening these virus files after seeing the exe format. Although anti-virus software can help users kill some viruses to a certain extent, the speed of anti-virus software updates is far slower than that of viruses.
Finally, the incaseformat virus is coming on fiercely. I hope that all users will pay attention to their computers and try to avoid letting their computers be infected with such viruses, which may cause unnecessary data loss.
If you are satisfied with my article, please pay attention and support the author a lot.