New Folder.exe Virus Removal Tool

Started by dhilipkumar, Sep 25, 2008, 05:54 PM

Previous topic - Next topic

dhilipkumar

If this virus infected in you computer, It will Disable the following ...

Task Manager, Registry Editor, Folder Options, Run in start menu

And it will create exes like the icon of folders. If this virus is running it will use more than 50 % of your processor

Download following tools to remove new folder.exe virus


download here


http://downloads.andymanchesta.com/RemovalTools/SDFix.exe



Manually remove it (new folder.exe Fix)

Delete File named svichossst.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"@"=[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Yahoo Messengger"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="Explorer.exe "

dhilipkumar

 Download the pack and you do not need to run procexp but run autoruns and in the Logon Tab uncheck SSVICHOST.EXE entry and you are done.

How to fix Newfolder.exe manually? For advanced users only


This problem can be solved manually by deleting all registry keys and files connected with this software, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Iddono. To fix this threat, you should:

1. Kill the following processes and delete the appropriate files:

libedit.dll
newfolder.exe
shelliddono.dll
srv0104.ids
srvidd20.exe

If these files can't be deleted during normal Windows work or recreate themselves, reboot into Safe Mode and repeat deletion. If you do not see all of these files, then they are hiding themselves. You need special software to kill those hidden files.

2. Delete the following malicious registry entries and\or values:

Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Run for nwiz.exe
Value: @
Key: software\microsoft\windows\currentversion\run\alchem
Value: @
Key: software\microsoft\windows\currentversion\run\zzb
Value: @