Tuesday, January 19, 2010

When you double-click your C: drive It gives you an option to choose a program to open with...

Method 1:-
  • Double-click on My Computer on Desktop.
  • Choose Tools and select "Folder options"
  • Click on "View" tab, select "Show Hidden files and folders" and uncheck "Hide Extention...."
  • Click on "Hide protected operating system files" (these selections are important to find the files you need to delete)
  • Click "OK."
  • Open Windows Task Manager (ctrl-alt-del) and select the "Processes" tab
  • Click on "Image name" to sort the list
  • Find "wscript.exe" and click on "End Process" (if there is more than one process with that name you have to end all of them)
  • Close Windows Task Manager.
  • Click on Start and select "Search" and search for "autorun.inf" (search the computer)
  • Delete all the files that contain the text MS32DLL.dll.vbs (the virus) by pressing Shift+Delete. (There obviously should not be Autorun.inf in the C: root).
  • You will also delete the virus from the system (C:\WINDOWS\ MS32DLL.dll.vbs) by pressing g Shift+Delete.
  • Next you have to edit the Register. (Please not that you have to be very careful in the Registry tools; certain mistakes in the Registry can crash your computer)
  • Click on "Start" and select "Run" and type in "Regedit" and press "Enter".
  • Select HKEY_LOCAL_MACHINE --> Software -->Microsoft -->Windows --> Current Version --> Run.
  • Find "MS32DLL" and delete that entry.
  • Select HKEY_CURRENT_USER --> Software --> Microsoft --> Internet Explorer --> Main. There you find Window Title "Hacked by Godzilla" and you should delete that entry. You can close the Registry now.
  • Click on Start --> Run and type in "gpedit.msc" and press "Enter."
  • Open "Group Policy": select User Configuration --> Administrative Templates --> System --> and there you will double click on "Turn Off Autoplay"
  • In the window there you should select "Enabled" and select "All drives" (they say in a certain Thai website that select all turn of Autoplay will be safer for not getting viruses). Now you can close the Group Policy.
  • Click on Start --> Run and type "msconfig" and press "Enter".
  • Open "System Configuration Utility".
  • Click on "Startup" tab
  • Find the file MS32DLL, choose Enable All, then uncheck "MS32DLL"
  • Click Apply and then OK to close
  • Exit the "System Configuration Utility" and select "Exit Without Restart" when prompt.
  • After this, double-click on My Computer and select "Tools" and "Folder Options" and "View" tap to change back there.
  • select "Hide Extention..." and "Hide protected operating system file" and "Don't show hidden files and folders".
  • Empty the "Recycle bin" and "Restart" your computer.
Method 2:-
Follow the set of commands below to show and delete the autorun.inf
  • Open Start>>Run and type cmd and press enter. This will open a command prompt window. On this command prompt window type the following steps.
  • type cd\
  • type attrib -r -h -s autorun.inf
  • type del autorun.inf
  • now type d: and press enter for d: drive partition. Now repeat steps 3 and 4. Similarly repeat step 5 for all your hard disk partition.
  • Restart your system and your trouble will be fixed.

No comments: