Friday, 23 September 2016

How to delete folder virus

How to delete folder virusThe Newfolder.exe Virus is one of the most dangerous viruses that hides files in USB files and disables things like Task Manager, Regedit, and Folder Options. The virus creates .exe files that mirror your existing files, leading to the virus taking up as much as 50% of your storage space, along with other nasty side effects, which can cause your computer to experience a drastic loss in speed and efficiency.

Here i share the 2 methods to delete folder virus without any antivirus.





METHOD 1






STEP 1:- Open run(win+r) and write gpedit.msc.



STEP 2:- The following window will open.Now open prevent access toregistry editing tools and disable it.



STEP 3:- After that again open run(win+r) and write regedit and press enter now press Ctrl+F (find)  and write regsvr32.exe



Delete one by one but do not delete regsvr32.exe.



At one or two place you will find it after explorer.exe, in these cases  delete only                         regsvr.exe part and not whole part. 

E.g. shell = ‘Explorer.exe regsvr.exe’ then delete regsvr.exe and leave explorer.exe

It done...virus is dead.




METHOD 2







  1. Open command prompt by typing cmd in "Start" and type the following command one by one in the command prompt.

taskkill /f /t /im “New Folder.exe”

taskkill /f /t /im “SCVVHSOT.exe”

taskkill /f /t /im “SCVHSOT.exe”

taskkill /f /t /im “scvhosts.exe”

taskkill /f /t /im “hinhem.scr”

taskkill /f /t /im “blastclnnn.exe”



  1. As this virus disable your task manager,regedit you will have to enable these things. For enabling it you need to enter following command in the command prompt one by one.

reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /

reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f



  1. Now for deletation of this virus permanently we have to delete some of the files which is hidden and stored in you c: drive

  2. For that first of all we have to enable the setting for viewing hidden file and folder for that open C: drive now go to organize ->folder and search option and select show hidden files and folder             

  3. Now delete the listed files

C:\WINDOWS\SCVVHSOT.exe

C:\WINDOWS\SCVHSOT.exe

C:\WINDOWS\hinhem.scr

C:\WINDOWS\system32\SCVHSOT.exe

C:\WINDOWS\system32\blastclnnn.exe

C:\WINDOWS\system32\autorun.ini

C:\Documents and Settings\All Users\Documents\SCVHSOT.exe

And the virus will be removed from your computer









No comments:

Post a Comment