Tuesday, February 2, 2010

What the bug!!

You turn on your PC. You find some stuff in a folder to hide it from your bro, You change the folder attributes to 'Hidden', click on Tools->and ?????? guess what. Folder options is jus gone. Well, this is easier to fix.

Activate folder options
1. Go to Start->Run, type in "gpedit.msc". Group Policy will open.
2. Click on User Configuration.
3. Click on Windows explorer.
4. Double click "Remove folder options from Tool menu"
5. Select Disabled and click Ok.

Go back and check under Tools and its there :-)
If you find it difficult to do this, jus try youtube video tutorial

However you might have come across a situation like, you click on Tools->Folder options->View and click on 'Show hidden files and folders' and come back n check to see there are no hidden files/folders shown. You disbelive yourself for a moment that you have clicked the proper option or not and go back to check it again . It has been reset to 'Do not show hidden files and folders'. Hang on! Its not you but the VIRUS.
Sometimes a virus or a malicious script makes the "hidden files and folders" not visible even when it is explicitly enabled.

Solution : A complete anti-virus scan can fix this. But not all the times. Many of my friends including myself have turned up re-installing the Operating System to fix this. Not again. There is a way to make your system completely free of active virus and delete all the malicious scripts without the need of formatting the entire disc or even re-installing the Operating system.

Please follow all the steps below. I ll assure you will be happy at the results.

1. Click here to download the file del virus.bat. (This is a small batch file which contains some basic dos commands to delete all the known viruses. These are sometimes not detected by the anti-virus and hence have to be deleted manually. )
After downloading the file, just double click on it. It will do the job of deleting all known viruses.

2. Now download the Malwarebytes Anti-Malware to your desktop.


  • Double-click mbam-setup.exe and follow the prompts to install the program.
    Once the program is loaded, select Perform quick scan, then click Scan.

  • When the scan is complete, click OK, then Show Results to view the results

  • Then click Remove SelectedAdd Image

3. Download ComboFix
IMPORTANT !! Save ComboFix.exe to your Desktop
Disable your AntiVirus and Anti Spyware applications,usually via a right click on the System tray icon.

  • Double click on ComboFix.exe and follow the prompts.
    As part of the process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it is strongly recommended to have this pre-installed on your system before doing any malware removal.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console.
  • Click on Yes, to continue scanning for malware.
    Note: If the Anti-virus/Anti-Spyware is not disabled, it will prompt you to disable before continuing. If you are not able to disable, just ignore the message and continue with the scan.

Note:
Do not mouse-click Combofix's window while it is running. That may cause it to stall.
ComboFix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security.
It disconnects your system from the internet. The connection is automatically restored.

Give it atlease 20-30 minutes to finish if needed.

Congrats !! You have successfully cleaned your system .

You can also benifit from the complete post at WhattheTech Forum.

The above steps will cleanup your system from all the infections. Listed below are some of the common infections:

-Registry and Taskmanager disabled.
-Shutdown disabled or frequent restart of the system.
-Frequent internet disconnection or complete internet disconnection after few minutes of logon and also very slow internet connection.

Kindly post questions for any problems you face with the system and don't forget to post comments on how your PC behaves for the above solution. :)