Showing posts with label Spyware. Show all posts
Showing posts with label Spyware. Show all posts

Wednesday, December 5, 2012

Script to make all folder unhide

If you face a problem that all your folder in window directory was missing, you may try to un-check few options in folder option menu.
By default of Windows, the ribbon will be at #2-1, "Don't show hidden files, folders, or drives.
To view hidden file, change the ribbon to #2-2, show hidden files, folders, and drives
However, sometimes you need to un-check #2-3, hide protected operating system files (recommended) while the system has been infected by virus.

#3 is un-hide all file extension for all file types if there was un-check.

Then you may see some kind like this as below picture. All folder are hidden and grey out.

How to make all folder unhidden in one-shot instead to do it one-by-one folder?
Here is the command prompt script to let you unhide all folder in one-click.



Copy all those text into notepad.exe and save it as *.bat file extension. Then put the file *.bat into those folder or drives that infected and execute it.
Then you will see all your folder come back as per normal and you may check back the folder options as windows default.

Reference:

http://forums.techguy.org/windows-7/1029473-making-all-hidden-files-unhidden.html

Wednesday, April 11, 2012

How to remove Personal Shield Pro in your computer


Personal Shield Pro is a fake security tool which you should remove immediately because its unable to detect, and, of course, remove threats from the system. The purpose of this rogue is to scare you by using misleading methods such false scan results and and then convince you to purchase full version of the software.



When Personal Shield Pro is running, it blocks certain application on your computer, usually Task Manager, Registry editor, other system utilities and of course legitimate anti-malware software.

Solution 1:
1. Reboot your computer in Safe mode with networking.
2. Download free anti-malware software from the list below and run a full system scan.

NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as administrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.

Solution 2:
Make sure that you can see hidden and operating system protected files in Windows.

NOTE: Under the Hidden files and folders section, click Show hidden files and folders, and remove the checkmarks from the checkboxes labeled:
  • Hide extensions for know file types
  • Hide protected operating system files
Click OK to save the changes.

1. Find Personal Shield Pro file(s).

WinXP - C:\Documents and Settings\All Users\Application Data\
Win Vista/7 - C:\ProgramData\

2. Look for suspect ".exe" or ".pspro" files in the given directories depending on the Windows version you have.
NOTE: Basically, there will be a malicious ".pspro" file named with a series of numbers or letters.

3. Rename the file extension:
Example: Rename aYHmMJuqrr2.pspro to aYHmMJuqrr2.vir

4. Restart your computer. The malware should be inactive after the restart.

5. Open Internet Explorer. Download exe_fix.reg and run it. Click "Yes" to safe the changes.

6. Download free anti-malware software from the list below and run a full system scan.
Solution 3:
Personal Shield Pro associated files and registry values:
Just REMOVE and DELETE it.

Windows XP:
C:\Documents and Settings\All Users\Application Data\[SET OF RANDOM CHARACTERS].exe

C:\Documents and Settings\All Users\Application Data\[SET OF RANDOM CHARACTERS].pspro
%Temp%\[SET OF RANDOM CHARACTERS]
%Documents and Settings%\All Users\Desktop\Personal Shield Pro.lnk


Windows Vista/7:
C:\ProgramData\[SET OF RANDOM CHARACTERS].exe

C:\ProgramData\[SET OF RANDOM CHARACTERS].pspro

Registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[SET OF RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[SET OF RANDOM CHARACTERS].pspro"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[SET OF RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\[SET OF RANDOM CHARACTERS]
HKEY_CLASSES_ROOT\.pspro

HKEY_CLASSES_ROOT\PSP
HKEY_CLASSES_ROOT\.exe "Default" = 'PSP'



Resouces:




Related Posts Plugin for WordPress, Blogger...