Reply to thread

Message: <blockquote data-quote="x-pert" data-source="post: 590918" data-attributes="member: 837">Virus name is ctfmon I think... Not quite sure. But try to find it ... If you are running WINSPY, try disabling it as well. Another solution Start> Run> type: regedit and hit OK. Navigate to:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AdvancedClick on Advanced folder in the left pane and look for Hidden in the right panel. Set the value to 1 to show and 2 to hide.If not there, create DWORD value with Value name: Hidden and set the value as above.Restart the machine.. Bang youare done buddy...If you cant edit the registry, try using the followingStart>run REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /fhit enter.You are done... If you are using Windows XP pro try using thisGroup Policy Editor (Windows XP Professional only)Click Start, Run and type gpedit.msc and hit ENTER Go to the following location: User Configuration/Administrative Templates/SystemDouble-click Disable registry editing tools and set it to Not Configured. Exit the Group Policy Editor If the setting already reads Not Configured, set it to Enabled, and click Apply. Then revert it back to Not Configured. This ensures that the DisableRegistryTools registry value is removed successfully.Please be carefull when deleting the ctfmon.exe, coz it belongs to MS Office also. The virus name is also the same. Anyway, the ctfmon should not run at startup. If it is running in the startup then it likely to be the virus.All the best machang...</blockquote>

Verification: Hath warak paha keeyada? (hatha wadikireema paha)

Top Bottom