教一个命令：
DISK:\> help attrib > attrib.txt
---------------------attrib.txt-----------------------
Displays or changes file attributes.
ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [drive:][path][filename]
[/S [/D]]
+ Sets an attribute.
- Clears an attribute.
R Read-only file attribute.
A Archive file attribute.
S System file attribute.
H Hidden file attribute.
[drive:][path][filename]
Specifies a file or files for attrib to process.
/S Processes matching files in the current folder
and all subfolders.
/D Processes folders as well.
一般病毒会把自己搞成系统的、隐藏的、只读的文件，则
DISK:\>attrib -s -r -h 可能的病毒文件
分辨出哪个该杀后直接del就可以了