Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Spyware, Viruses, etc. (https://www.askmehelpdesk.com/forumdisplay.php?f=477)
-   -   Folder Options (Changes automatically) (https://www.askmehelpdesk.com/showthread.php?t=364411)

  • Jun 13, 2009, 01:28 AM
    Ramish
    Folder Options (Changes automatically)
    Hello All;

    I believe I have got a virus in my computer. Every time I turn off and on my computer, the options under folder options are automatically modified. The options are;

    (1). Folder Options > Hidden Files and Folders > 1. Do not show hidden files and folders
    > 2. Show hidden files and folders
    (2). 3. Hide Extenions for known file types

    Whenever I turn on my laptop (Microsoft Windows XP SP3 OS), Option 2 (Show hidden Files and folders) is checked. I uncheck this option by checking/enabling the option number 1, but still my computer keeps repeating the same thing evertime I turn it ON.

    Option 3 (Hide Extensions for know file types) is also unchecked when my computer restarts.

    Please help if you know anything about this virus

    Regards,
  • Jun 13, 2009, 05:15 AM
    Ramish
    Hello All;

    I just went through some online investigation about this virus and found out below details. And it works! I just did it on my computer.



    Virus Overview
    There have been a number of recent malicious programs exploiting the default behavior of Windows operating systems to hide file extensions from the user. This behavior can be used to trick users into executing malicious code by making a file appear to be something it is not.


    Virus Description
    Multiple email-borne viruses are known to exploit the fact that Microsoft Windows operating systems hide certain file extensions. The first major attack incorporating an element of file extension obfuscation was the VBS/LoveLetter worm which contained an email attachment named "LOVE-LETTER-FOR-YOU.TXT.vbs". Other malicious programs have since incorporated similar naming schemes.

    Impact
    Users can be tricked into opening a file that appears to be something it is not. A file that appears to be innocent based on it's viewable file name may contain malicious executable code.


    Remove all occurrences of the value "NeverShowExt" from the registry

    Open the Windows Start menu
    Select "Run" and enter "regedit" to open the registry editor
    From the "Edit" menu, select "Find"
    Uncheck the "Keys" and "Data" entries under "Look at", and insure the "Values" entry is checked
    Enter "NeverShowExt" in the "Find What" box and click "Find Next"
    When a value is found, right click on the value name and select "Delete"
    Press F3 to find the next occurrence of "NeverShowExt".
    Repeat the previous two steps until all occurrences of "NeverShowExt" have been deleted from the registry
    The computer will need to be rebooted for changes to take effect
  • Oct 22, 2010, 06:43 AM
    UDAYCAMPUS
    Uninstall ur windows ands make a reinstall after making a copy of all important files... dat will work best

  • All times are GMT -7. The time now is 01:33 PM.