double click on drive shows open with

openwith

1.Double click on My computer on Desktop ,
– choose Tool and select “Folder options”
– click on “View” tap select “Show Hidden files and folders” and un hake “Hide Extention….”
– and “Hide protected operating system file” (this selections are important to find the files you need to delete)
– then click “OK”

2. Open Windows Task Manager (ctrl-alt-del) and select the “Processes” tap
– Click on “Image name” to sort File
– find “wscript.exe” and click on “End Process”
– close the “Task Manager”

3. Then click on Start and select “Search” and search for “autorun.inf” (Search the computer)
–  then delete all the files that contains the text MS32DLL.dll.vbs (the virus) by pressing: SHIFT + DELETE. (There of course should not be Autorun.inf in the C rooth).

4. Also delete the virus from the system (C:\WINDOWS\ MS32DLL.dll.vbs) by pressing: SHIFT + DELETE

5. Next step is to edit the Registery . take backup of your registry before editin it.

– first, click on “Start” and select “Run” and type in “Regedit” and press “Enter”.
– select HKEY_LOCAL_MACHINE –> Software –>Microsoft –>Windows –> Current Version –> Run.
– find there “MS32DLL” and delete that entry.

6. Then select HKEY_CURRENT_USER –> Software –> Microsoft –> Internet Explorer –> Main. There you find “Window Title “Hacked by Godzilla”” and you should delete that entry. You can close the registry now.

7. next click on Start –> Run and type in “gpedit.msc” and press “Enter”. then you will open “Group Policy”.
– there select User Configuration –> Administrative Templates –> System –> and there you will double click on “Turn Off Autoplay”

– in the window there you should select “Enabled” and select “All drives” . Now you can close the Group Policy.

8. Next click on Start –> Run and type “msconfig” and press “Enter”.
– you will open “System Configuration Utility”.
– click on “Startup” tap
– find the file MS32DLL, choose Enable All, then unhake “MS32DLL”
– click Apply then OK to close

– then exit the “System Configuration Utility” and select “Exit Without Restart” when prompt.

9. After this you double click on My Computer and select “Tools” and “Folder Options” and “View” tap to change back there.
– select “Hide Extention…” and “Hide protected operating system file” and “Don’t show hidden files and folders”.

– Then empty the “Recycle bin” and “Restart” your computer.

or visit http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe

download and execute to get rid of the issue.

Incoming search terms for the article:

[HOW TO]Remove AMVO.EXE virus

What is it???

AMVO.exe is a trojan/backdoor

Symptoms:

  • Folder Option is not working – you cannot enable the Folder Option or show the hidden files running into you computer.
  • Hidden file problem
  • Always open new windows in all drives
  • Error occur of the memory reference

Here are the steps for removing it manually

  1. Uncheck amvo.exe from msconfig>> startup (type msconfig in run and click on the startup tab) also and restart your system
  1. Click Start > Run and type REGEDIT
  2. Go to HKEY_CURRENT_USER > SOFTWARE > Microsoft > Windows > CurrentVersion > Explorer > Advanced
  3. On the right side, double click the hidden value and give it a value of 1.
  4. Same for HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > Explorer > Advanced > Folder > Hidden > SHOW ALL Change the value of Checked Value to 1.
  5. Check if your Folder Option if its working now. If it works! OK you are now ready to delete the Amvo.exe virus now.

Go to your Folder Option and enable the show all the hidden files and you remove the following files if they are exist in the exact location or directory:

c:\autorun.inf
c:\u.bat
c:\amvo.exe
c:\awda2.exe
c:\d.com
c:\mvo.dll
c:\amvo1.dll
c:\windows\system32\ amvo.exe
c:\windows\system32\ awda2.exe
c:\windows\system32\ d.com
c:\windows\system32\ mvo.dll
c:\windows\system32\ amvo1.dll
c:\windows\system32\u.bat

Lastly go to Run and type cmd then type regedit, press Ctrl + F to find the files amvo.exe and delete it. After that, reboot your PC. OK that’s it. Guys please your comments if your PC is working now for using this procedure.. Thank you..

Computer Tricks
A weblog on computer tricks, windows tricks, registry tweaks, virus removal information , internet tricks.

Incoming search terms for the article:

[HOW TO]Remove NTDETEC1.exe

If you’re using the Operating System called Windows, chances are that you might have already come across the ntdetec1.exe virus. Or you will, sooner or later.

Its official name is W32.Ceted and it is a worm that copies itself to all shared and removable drives and spreads when the user double clicks on it to open it. If a system is infected, it creates a folder called ntdetec1 in your System Drive which is NOT visible via Explorer or Command prompt.

Related files:
\ntdetec1\ntdetec1.exe
\ntdetec1\cmrss.exe
\ntdetec1\run.exe
\ntdetec1\shell32.exe
\ntdetec1\drivelist.txt
\ntdetec1\child\autorun.inf
\ntdetec1\child\ntdetec1.exe

Symptoms:
1. Task Manager closes as soon as it launches.
2. RegEdit may be inaccesible
3. Folder Options may be inaccessible

When I scanned using some anti-virus software, Nod32, Symantec AV Corporate, McAfee and AVG failed to detect the files, even in Safe Mode.

To remove it, run the following commands at the command prompt:

taskkill /im cmrss.exe
taskkill /im ntdetec1.exe
taskkill /im shell32.exe

Now, make sure you are in the root drive of your system. For example, if your Windows in installed in C:, make sure your prompt shows C:\>
Now, run the command..

attrib ntdetec1 -s -h -r /s /d

(s->system,h->hidden,r->read only)

This will make the folder visible in explorer. Now you can Shift+Delete the folder from explorer.

Also, you might need to delete the following registry key (if it is present)

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\ Run\"winlogon" = "C:\ntdetec1\run.exe"

Congratulations, this will remove all known traces of the above worm.

And remember, next time you use someone’s PD, before you access it, goto your command prompt and delete the autorun.inf file if any

Incoming search terms for the article: