Help me to remove virus infection !!!

cybershivanka

Junior member
  • Aug 31, 2007
    105
    5
    18
    Please help me to remove "regsvr.exe" virus !


    I'm going to blast my head while this virus creating exe files continuously & rapidly for each & every folder.
    Please Help


    :oo:
     
    Last edited:

    xcorect

    Well-known member
  • Apr 17, 2007
    7,881
    84
    48
    Virus guard ekak nadda
    DownloadLink:
    Code:
    http://rapidshare.com/files/166813482/Malwarebytes_Anti-Malware.rar
    me soft eka dala database eka update karala
    full scan ekak danna
     

    DragonD

    Well-known member
  • Nov 26, 2008
    3,508
    1,537
    113
    37.235065, -115.811117
    cybershivanka said:

    cant access Registry

    Task Manager Hides

    Folder option cant see

    Hidden files cant see

    cant see System files & extensions

    :oo:


    to access registry -

    mee tiyena codes tika copy karala , notepad eke paste karala , "registryfix.vbs" kiyala save karala , file eka uda double click karanna


    Code:
    'Enable/Disable Registry Editing tools
    'DragonD
    
    Option Explicit
    
    'Declare variables
    Dim WSHShell, n, MyBox, p, t, mustboot, errnum, vers
    Dim enab, disab, jobfunc, itemtype
    
    Set WSHShell = WScript.CreateObject("WScript.Shell")
    p = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
    p = p & "DisableRegistryTools"
    itemtype = "REG_DWORD"
    mustboot = "Log off and back on, or restart your pc to" & vbCR & "effect the changes"
    enab = "ENABLED"
    disab = "DISABLED"
    jobfunc = "Registry Editing Tools are now "
    
    'This section tries to read the registry key value. If not present an 
    'error is generated.  Normal error return should be 0 if value is 
    'present
    t = "Confirmation"
    Err.Clear
    On Error Resume Next
    n = WSHShell.RegRead (p)
    On Error Goto 0
    errnum = Err.Number
    
    if errnum <> 0 then
    'Create the registry key value for DisableRegistryTools with value 0
        WSHShell.RegWrite p, 0, itemtype
    End If
    
    'If the key is present, or was created, it is toggled
    'Confirmations can be disabled by commenting out 
    'the two MyBox lines below
    
    If n = 0 Then
        n = 1
    WSHShell.RegWrite p, n, itemtype
    Mybox = MsgBox(jobfunc & disab & vbCR & mustboot, 4096, t)
    ElseIf n = 1 then
        n = 0
    WSHShell.RegWrite p, n, itemtype
    Mybox = MsgBox(jobfunc & enab & vbCR & mustboot, 4096, t)
    End If
     

    DragonD

    Well-known member
  • Nov 26, 2008
    3,508
    1,537
    113
    37.235065, -115.811117
    cybershivanka said:

    cant access Registry

    Task Manager Hides

    Folder option cant see

    Hidden files cant see

    cant see System files & extensions

    :oo:


    Task manager eka fix karanna

    Code:
    REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

    code eka Run eke typr karala "OK" karanna
     

    DragonD

    Well-known member
  • Nov 26, 2008
    3,508
    1,537
    113
    37.235065, -115.811117
    cybershivanka said:

    cant access Registry

    Task Manager Hides

    Folder option cant see

    Hidden files cant see

    cant see System files & extensions

    :oo:
    Hidden files enable karanna

    Code:
    [INDENT]Windows Registry Editor Version 5.00
     [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden]
    “Text”=”@shell32.dll,-30499″
    “Type”=”group”
    “Bitmap”=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
    00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,\
    48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,34,00,00,\
    00
    “HelpID”=”shell.hlp#51131″
     [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]
    “RegPath”=”Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced”
    “Text”=”@shell32.dll,-30501″
    “Type”=”radio”
    “CheckedValue”=dword:00000002
    “ValueName”=”Hidden”
    “DefaultValue”=dword:00000002
    “HKeyRoot”=dword:80000001
    “HelpID”=”shell.hlp#51104″
     [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
    “RegPath”=”Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced”
    “Text”=”@shell32.dll,-30500″
    “Type”=”radio”
    “CheckedValue”=dword:00000001
    “ValueName”=”Hidden”
    “DefaultValue”=dword:00000002
    “HKeyRoot”=dword:80000001
    “HelpID”=”shell.hlp#51105″
    [/INDENT]

    Note pad eke type karala , "Foldeoption.reg" kiyala save karanna

    double click karanna file eka !

    registry ekata info add wenawa kiyala msg ekak aawot "yes" karanna
     

    softrb

    Member
    Feb 20, 2009
    3
    0
    0
    regsvr.exe remover

    cybershivanka said:
    Please help me to remove "regsvr.exe" virus !


    I'm going to blast my head while this virus creating exe files continuously & rapidly for each & every folder.
    Please Help


    :oo:
    u can solve this problum using this link

    http://roshanocs.googlepages.com

    regsvrremover-full;init:.JPG


    rbToolspic.JPG
     
    Last edited:

    cybershivanka

    Junior member
  • Aug 31, 2007
    105
    5
    18
    man...... what is this.. ? it looks u made it.. !

    softrb said:
    u can solve this problum using this link

    http://roshanocs.googlepages.com

    regsvrremover-full;init:.JPG


    What tyhe heck this is .... did u made it ? how it works ?