Showing posts with label Remove Virus w/t Antivirus. Show all posts
Showing posts with label Remove Virus w/t Antivirus. Show all posts
Saturday, March 21, 2009

Remove New Folder.exe virus

Remove virus(new folder)without using Antivirus

1.click on start button
2.click run type regedit press ok

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

right click on RavTimeXP n delete it

again click start button
select search button
search for All files and folder
type *.exe
select all drives n click on More advanced options
check the below options
n then search
after search finished
delete all folders from there....

Thursday, March 19, 2009

Recover a Corrupted System File

If an essential Windows file gets whacked by a virus or otherwise corrupted, restore it from the Windows CD. Search the CD for the filename, replacing the last character with an underscore; for example, Notepad.ex_. If it's found, open a command prompt and enter the command EXPAND, followed by the full pathname of the file and of the desired destination: EXPAND D:\SETUP\NOTEPAD.EX_ C:\Windows\NOTEPAD.EXE. If either pathname contains any spaces, surround it with double quotes.

If the file isn't found, search on the unmodified filename. It will probably be inside a CAB file, which Win XP treats as a folder. Simply right-drag and copy the file to the desired location. In other Windows platforms, search for a file matching *.cab that contains the filename. When the search is done, open a command prompt and enter EXTRACT /L followed by the desired location, the full pathname of the CAB file, and the desired filename; for example: EXTRACT /L C:\Windows D:\I386\Driver.cab Notepad.exe. Again, if the destination or CAB file pathname contains spaces, surround it with double quotes.

Watson is a debugging tool in windows , which sometimes becomes quite irritating when ever it pops up suddenly .

Here is a method to disable it , if it bugs you :

Dr. Watson can be disabled using the registry editor:

  1. Start the registry editor (Start >> Run >> type "regedit.exe" >> Hit enter )
  2. Navigate to HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug
  3. Click on AeDebug and click Del
Alternativly just set HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ AeDebug \ AUTO to 0

To re-enable Dr. Watson type "drwtsn32 -i" in run window.

Solution 1:
That's a virus named as ravmon.exe and autorun.inf
Scan first with a good antivirus [Nod32 Recommanded]
then try this trick.

First show the hidden files and folders options then try this method

1. Go to Start-->run and type cmd then click ok

2. If u want to remove the infected file from c drive then type C: in command prompt and press enter

3. Type autorun.inf and press enter
autorun.inf file is opened

4. Now type "attrib autorun.inf -s -h -r" and press enter

5. Now delete the file by typing
"del autorun.inf" and press enter

6.Now type autorun.inf and press enter now, u will find no infected autorun.inf file.

7. same way do for all other drives then restart ur pc


3. I accidentally deleted my "mspaint.exe"/"notepad.exe"/etc. file, how can I get it back?


Solution::

You can use any of following methods:

A. Goto "%windir%\System32\DLLCache" folder and look for the file, if its there then copy it to "%windir%\System32\" folder.

B. Insert your Windows Setup CD and goto "I386" folder. Now look for the same file, it'll present there but the last letter of extension will be "_". e.g., u'll get "mspaint.ex_"/"notepad.ex_"/etc. Now open Command Prompt and goto "I386" folder and give following command:

expand mspaint.ex_ mspaint.exe
expand notepad.ex_ notepad.exe
etc.

Now u can copy the file to "%windir%\System32" folder.

C. Give following command in Command Prompt:

sfc /SCANNOW

It'll automatically restore the files.

Using Group Policy Editor - for Windows XP Professional to Enable Task Manager.

* Click Start, Run, type gpedit.msc and click OK.
* Navigate to this branch:

User Configuration / Administrative Templates / System / Ctrl+Alt+Delete Options / Remove Task Manager

* Double-click the Remove Task Manager option.
* Set the policy to Not Configured.

Enable RegEdit [It is not tested]

REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Policies\System]
"DisableRegistryTools"=dword:00000000

Save the text file as any name u with extension .reg
example:- "enable.reg"
After that double click to run the file.

Note:DO SCAN YOUR MACHINE WITH A GOOD ANTIVIRUS. BECAUSE THIS PROGRAMS DON'T TURNED OFF BY HIMSELF OR AUTOMATICALLY. IT HAS TO A VIRUS EFFECT OR A ADMINISTRATOR HAS TO MANUALLY DISABLE THIS PROGRAMS.

I can't see Hidden files/folders in my computer. Even I enable the option "Show hidden files/folders" in "Tools -> Folder Options", its automatically disabled again.

Solution1: Go to your Start menu, click on Run and open up your Registry Editor by typing "regedit" without the quotes and pressing OK.

Once there go to: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folde r\Hidden\SHOWALL

Delete the value CheckedValue. (Its type should be REG_SZ and data should be 0 or 1.)

Create a new DWORD value called CheckedValue (same as above, except that the type is REG_DWORD) by right clicking on the right pane->New->DWORD Value. Modify the value data to 1 (0x00000001).
Solution 2: Open regedit and goto:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
In right-side pane, change value of "Hidden" to as following:

1 - To show hidden file
2 - To not show hidden files

If it doesn't work, then scan your computer with an anti-virus software.