Tuesday, November 17, 2009
In Make Sure Your Computer Free from Viruses post I’ve intro duce you to one of the virus behaviors. Usually virus use system file attribute as a place to hide. And here is the solution to repair it.
If you realize that your computer can’t show the “System Volume Information” folder in each hard drive, I suggest you follow my way to fix it.
First you should check “has the windows registry editor blocked by the virus?”. Just simply open run in start menu items or hold <WindowsKey> and then press ”R” letter from your keyboard. The run windows will appear, then write “regedit” and press enter. If the Windows Registry Editor opened. It means your Registry Editor has not been disabled by the virus. But if there is a message like this:
![registryerror[1]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiho6A1Z5Bt1gr1_wSiS0YB3oC9_jITqqgXlRJgpE3cW_hjTG1MHDcaVcdSTF6un0GrldPrbYvXA3MfFXh8qxeaNrPslEtjq0msE1E_osGgYUCeJi9cx3soHXPW26d_wOJ5NVLY9CDokhY/s1600-h/registryerror%5B1%5D%5B4%5D.jpg "registryerror[1]")
It’s pretty obvious that your computer is infected. And it needs pretty long way to fix it.
This is my way to fix it :
For those whose computer’s reg editor has not blocked.
Just simply copy this script to notepad and save it with “UnLock.reg” filename and don’t forget to set the “Save as type” with “all files”.
Code:
| Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden] |
then, right click in the file, choose “Merge”, and click ok on the following dialogue box.
![img1[1]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0c4bFy4QgEG4L_A2zIYyA3AUjaghhI1viqgqiN3TyBxrWaR3KfZ9IGH2ZBScOpOP0HjBzUYKbx04U5_6xEf9l8Q6IacSUYMPrq-W2eX2H39m4DiNI0I_CfWgijMNaRceEPvVyIwNmIgQ/s1600-h/img1%5B1%5D%5B2%5D.jpg "img1[1]")
Finally, restart your computer, and then do Make Sure Your Computer Free from Viruses tips again to show the super hidden files in your computer.
For those whose computer’s reg editor has blocked.
It’s little bit complicated. But I will tell you step by step.
1. Read the note below this post before doing the next step.
2. Use IceSword to change the registry editor.
3. Click the Registry bar on left side toolbar of the IceSword.
4. Find this key like you use Windows Explorer.
| [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] |
5. Delete that key.
6. Do “For those whose computer’s reg editor has not blocked.” tip.
IMPORTANT!!!!!
NB: Before you do those tips, make sure all of the virus processes have been terminated. If you not sure what kind of virus is that you can googling or ask in forum with post the disturbances of the virus. And ask google again for the list of processes which must be terminated. I suggest you terminate those processes with IceSword.
This tips are only available for Windows XP. For windows vista or 7 user, I personally suggest you to protect your computer with antivirus program such McAfee or Avast. You can download those freely through rapidshare. Just google it and you’ll find tons of download link, and those are free of charge.
That’s all. If your computer can show system files. You can see viruses in your computer directly and you just need to delete them all manually. Hope the information help. Good luck.
0 comments:
Post a Comment