Urdu Planet Forum -Pakistani Urdu Novels and Books| Urdu Poetry | Urdu Courses | Pakistani Recipes Forum  

Go Back   Urdu Planet Forum -Pakistani Urdu Novels and Books| Urdu Poetry | Urdu Courses | Pakistani Recipes Forum > IT Planet > IT Articles

Notices

IT Articles All Kind Of IT Related Urdu Articles Goes In This Section.

Reply
 
Thread Tools Display Modes
Old 06-17-2010, 11:44 AM   #1
smratback

Users Flag!
 
Join Date: Jun 2010
Posts: 13
smratback is on a distinguished road
Default How to remove new folder exe or regsvr exe or autorun inf virus

How to remove new folder exe or regsvr exe or autorun inf virus

--------------------------------------------------------------------------------

I want to tell you a story, two days back i got affected by this virus very badly as it eat up all my empty hard disk space of around 700 MB .

I was surprised that my most reliable friend Avast, for the first time failed me in this war against viruses but then again avg and bitdiffender also failed against it. This virus is know popularly as regsvr.exe virus, or as new folder.exe virus and most people identify this one by seeing autorun.inf file on their pen drives, But trend micro identified it as WORM_DELF.FKZ. It is spreading mostly using pen drives as the medium.

Well, so here is the story of how i was able to kill the monster and reclaim my hard disk space.

Manual Process of removal

I prefer manual process simply because it gives me option to learn new things in the process.

So let’s start the process off reclaiming the turf that virus took over from us.

1. Cut The Supply Line

a. Search for autorun.inf file. It is a read only file so you will have to change it to normal by right clicking the file , selecting the properties and un-check the read only option
b. Open the file in notepad and delete everything and save the file.
c. Now change the file status back to read only mode so that the virus could not get access again.
d.
e. Click start->run and type msconfig and click ok
f. Go to startup tab look for regsvr and uncheck the option click OK.
g. Click on Exit without Restart, cause there are still few things we need to do before we can restart the PC.
h. Now go to control panel -> scheduled tasks, and delete the At1 task listed their.

2. Open The Gates Of Castle
a. Click on start -> run and type gpedit.msc and click Ok.
b.
c. If you are Windows XP Home Edition user you might not have gpedit.msc in that case download and install it from Windows XP Home Edition: gpedit.msc and then follow these steps.

d. Go to users configuration->Administrative templates->system
e. Find “prevent access to registry editing tools” and change the option to disable.
f.
g. Once you do this you have registry access back.
3. Launch The Attack At Heart Of Castle
a. Click on start->run and type regedit and click ok
b. Go to edit->find and start the search for regsvr.exe,
c.
d. Delete all the occurrence of regsvr.exe; remember to take a backup before deleting. KEEP IN MIND regsvr32.exe is not to be deleted. Delete regsvr.exe occurrences only.
e. At one ore two places you will find it after explorer.exe in theses cases only delete the regsvr.exe part and not the whole part. E.g. Shell = “Explorer.exe regsvr.exe” the just delete the regsvr.exe and leave the explorer.exe

4. Seek And Destroy the enemy soldiers, no one should be left behind
a. Click on start->search->for files and folders.
b. Their click all files and folders
c. Type “*.exe” as filename to search for
d. Click on ‘when was it modified ‘ option and select the specify date option
e. Type from date as 1/31/2008 and also type To date as 1/31/2008
f.
g. Now hit search and wait for all the exe’s to show up.
h. Once search is over select all the exe files and shift+delete the files, caution must be taken so that you don’t delete the legitimate exe file that you have installed on 31st January.
i. Also selecting lot of files together might make your computer unresponsive so delete them in small bunches.
j. Also find and delete regsvr.exe, svchost .exe( notice an extra space between the svchost and .exe)

5. Time For Celebrations
1. Now do a cold reboot (ie press the reboot button instead) and you are done.
I hope this information helps you win your own battle against this virus. Soon all antivirus programs will be able to automatically detect and clean this virus. Also i hope Avast finds a way to solve this issues.
As a side note i have found a little back dog( winpatrol ) that used to work perfectly on my old system. It was not their in my new PC, I have installed it again , as I want to stay ahead by forever closing the supply line of these virus. You can download it form Winpatrol website.

Please do reply if it works and u like my Post
smratback is offline   Reply With Quote
Old 09-29-2010, 05:05 PM   #2
sksalman43

Users Flag!
 
Join Date: Aug 2010
Location: Karachi
Posts: 39
sksalman43 is on a distinguished road
Rose Re: How to remove new folder exe or regsvr exe or autorun inf virus

THANKS
sksalman43 is offline   Reply With Quote
Old 09-29-2010, 07:25 PM   #3
Princess Of Azkaban
! M Sorry ! M Not Perfect
 
Princess Of Azkaban's Avatar

Users Flag!
 
Join Date: Aug 2009
Location: City Of Bandle
Posts: 22,334
Princess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond reputePrincess Of Azkaban has a reputation beyond repute
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

tfs
__________________
Princess Of Azkaban is offline   Reply With Quote
Old 10-01-2010, 03:09 PM   #4
naeem kh
naeem kh

Users Flag!
 
Join Date: Jul 2010
Location: pakistan
Posts: 1,265
naeem kh is just really nicenaeem kh is just really nicenaeem kh is just really nicenaeem kh is just really nicenaeem kh is just really nice
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

thanks a lot for nice sharing.
naeem kh is offline   Reply With Quote
Old 10-05-2010, 03:30 AM   #5
thenish7

Users Flag!
 
Join Date: Oct 2010
Posts: 14
thenish7 is on a distinguished road
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

Thanks....
thenish7 is offline   Reply With Quote
Old 12-10-2010, 04:51 PM   #6
syedusmanahmed

Users Flag!
 
Join Date: Dec 2010
Posts: 6
syedusmanahmed is on a distinguished road
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

I am gonna check it. This virus caused so many problems for me.
syedusmanahmed is offline   Reply With Quote
Old 12-11-2010, 06:55 PM   #7
honhungoc
Banned

Users Flag!
 
Join Date: Dec 2010
Posts: 318
honhungoc is on a distinguished road
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

thanks for ur tips
honhungoc is offline   Reply With Quote
Old 12-19-2010, 07:21 PM   #8
Danish Shaikh

Users Flag!
 
Join Date: Dec 2010
Posts: 33
Danish Shaikh is on a distinguished road
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

ASALAM O ALAEKUM
Danish Shaikh is offline   Reply With Quote
Old 12-19-2010, 07:22 PM   #9
Danish Shaikh

Users Flag!
 
Join Date: Dec 2010
Posts: 33
Danish Shaikh is on a distinguished road
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

KYA HAAL HAIN DOSTON
Danish Shaikh is offline   Reply With Quote
Old 12-19-2010, 07:23 PM   #10
Danish Shaikh

Users Flag!
 
Join Date: Dec 2010
Posts: 33
Danish Shaikh is on a distinguished road
Default Re: How to remove new folder exe or regsvr exe or autorun inf virus

UMEED HAI SAB KHERIAT SE HNGE
Danish Shaikh is offline   Reply With Quote
Reply

Bookmarks

Tags
autorun, exe, folder, inf, regsvr, remove, virus


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
~New Folder Ka Virus???? Ab koi Masla Naheen~!!!!!!!!!! The_Don Tips And Tricks 9 05-18-2012 01:35 PM
*new folder* virus removing tool(working 100%) Charming_Prince General Discussion 4 04-11-2010 11:42 AM
USB Autorun Virus Remover 2.3 B.A.D.B.O.Y Software(with Roman review) 1 12-13-2009 11:31 AM
Remove Autorun & Chines Virus a Simple Trick! Must See xXxpert Tips And Tricks 8 08-25-2009 03:52 PM


All times are GMT +6. The time now is 11:09 PM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2020, vBulletin Solutions, Inc.