If you face a problem that all your folder in window directory was missing, you may try to un-check few options in folder option menu.
By default of Windows, the ribbon will be at #2-1, "Don't show hidden files, folders, or drives.
To view hidden file, change the ribbon to #2-2, show hidden files, folders, and drives
However, sometimes you need to un-check #2-3, hide protected operating system files (recommended) while the system has been infected by virus.
#3 is un-hide all file extension for all file types if there was un-check.
Then you may see some kind like this as below picture. All folder are hidden and grey out.
How to make all folder unhidden in one-shot instead to do it one-by-one folder?
Here is the command prompt script to let you unhide all folder in one-click.
Copy all those text into notepad.exe and save it as *.bat file extension. Then put the file *.bat into those folder or drives that infected and execute it.
Then you will see all your folder come back as per normal and you may check back the folder options as windows default.
Reference:
http://forums.techguy.org/windows-7/1029473-making-all-hidden-files-unhidden.html
Nerd in IT and provide you as much as IT solution. You may send requests to itweirdo@gmail.com. Thanks for support =)
Showing posts with label Spyware. Show all posts
Showing posts with label Spyware. Show all posts
Wednesday, December 5, 2012
Wednesday, April 11, 2012
How to remove Personal Shield Pro in your computer
Personal Shield Pro is a fake security tool
which you should remove immediately because its unable to detect, and, of
course, remove threats from the system. The purpose of this rogue is to scare
you by using misleading methods such false scan results and and then convince
you to purchase full version of the software.
When Personal Shield Pro is running, it blocks certain application on your computer, usually Task Manager, Registry editor, other system utilities and of course legitimate anti-malware software.
Solution 1:
1. Reboot your computer in Safe mode with networking.
2. Download free anti-malware software from the list below and run a full system scan.
- MalwareBytes
Anti-malware
- SUPERAntispyware
- Spybot S&D
- Hitman
Pro 3.5
- Emsisoft HiJackFree
- a-squared HiJackFree
Make sure that you can see hidden and operating system protected files in Windows.
NOTE: Under the Hidden files and folders section, click Show hidden files and folders, and remove the checkmarks from the checkboxes labeled:
- Hide extensions for know file
types
- Hide protected operating system
files
1. Find Personal Shield Pro file(s).
WinXP - C:\Documents and Settings\All Users\Application Data\
Win Vista/7 - C:\ProgramData\
2. Look for suspect ".exe" or ".pspro" files in the given directories depending on the Windows version you have.
NOTE: Basically, there will be a malicious ".pspro" file named with a series of numbers or letters.
WinXP - C:\Documents and Settings\All Users\Application Data\
Win Vista/7 - C:\ProgramData\
2. Look for suspect ".exe" or ".pspro" files in the given directories depending on the Windows version you have.
NOTE: Basically, there will be a malicious ".pspro" file named with a series of numbers or letters.
3. Rename the file extension:
Example:
Rename aYHmMJuqrr2.pspro
to aYHmMJuqrr2.vir
4. Restart your computer. The malware should
be inactive after the restart.
5. Open Internet Explorer. Download exe_fix.reg and run it. Click "Yes" to safe the changes.
6. Download free anti-malware software from the list below and run a full system scan.
Solution 3:5. Open Internet Explorer. Download exe_fix.reg and run it. Click "Yes" to safe the changes.
6. Download free anti-malware software from the list below and run a full system scan.
Personal Shield Pro associated files and registry values:
Just REMOVE and DELETE it.
Windows XP:
C:\Documents and Settings\All Users\Application Data\[SET OF RANDOM CHARACTERS].exe
C:\Documents and Settings\All Users\Application Data\[SET OF RANDOM CHARACTERS].pspro
%Temp%\[SET OF RANDOM CHARACTERS]
%Documents and Settings%\All Users\Desktop\Personal Shield Pro.lnk
Windows Vista/7:
C:\ProgramData\[SET OF RANDOM CHARACTERS].exe
C:\ProgramData\[SET OF RANDOM CHARACTERS].pspro
Registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[SET OF RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[SET OF RANDOM CHARACTERS].pspro"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[SET OF RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\[SET OF RANDOM CHARACTERS]
HKEY_CLASSES_ROOT\.pspro
HKEY_CLASSES_ROOT\PSP
HKEY_CLASSES_ROOT\.exe "Default" = 'PSP'
Resouces:
Emsisoft
HiJackFree - http://freeofvirus.blogspot.com/2011/06/personal-shield-pro-removal-guide.html
a-squared
HiJackFree - http://freeofvirus.blogspot.com/2009/02/how-to-kill-process-effectively.html
Labels:
AntiMalware,
AntiSpybot,
AntiSpyware,
Antivirus,
Guide,
Malware,
Registry,
Removal,
Solution,
Spybot,
Spyware
Subscribe to:
Posts (Atom)


