Here are some Tricks in Windows Xp against some common Viruses............

1) Folder Options Missing

(Trojan)

1. Go to Start > RUN

2. Type regedit and press enter.

3. Go to HKEY_CURRENT_USER > Software > Microsoft > Windows > CurrentVersion > Policies > Explorer

4. On the right side of the screen, you can see some registry entry names, out of them, right-click on NoFolderOptions and click Modify option.

5.A new small screen pops up, on this screen, sen the value data field as 0 (zero).Press OK.  That’s it but it requires reboot. Trouble Fixed.

                                     OR

There is an easy way also..........

Download the registry File.........

folderoptions.reg

And Double click it to add it on registry..........

2) Task Manager Disabled

                 After removing the virus completely from our system, you’ll face new problems such as you can no longer bring up Windows Task Manager from CTRL+ALT+DEL. You get the error message saying “Task Manager has been disabled by your administrator”.

You think that it’s easy to fix this problem by going to Registry Editor but you can’t! You get the error message “Registry editing has been disabled by your administrator“.

                               Folder Options and even Show Hidden Files & Folder is disabled! How frustrating! Don’t worry, here’s how to restore your Windows Task Manager, Registry Editor, Folder Options and Show hidden files & folders.

This problem is most commonly caused by a virus called “Brontok“. Brontok virus will make some changes to the system restrictions in order to hide itself from easy detection and also from easy cleaning.  Here’s a free tool called Remove Restrictions Tool (RRT) which is able to re-enables all what the virus had previously disabled, and gives you back the control over your own computer.

Small and easy to use. Make sure you boot in to Safe Mode to use Remove Restrictions Tool (RRT). Just click on the buttons and it’ll do it’s job.

3) To remove Win32/NSAnti, d.com viruses.

If your system is infected by this virus you can’t see hidden files and folders , even after applying the settings to show hidden folders. This setting is reverted back to Don’t show hidden files and folders by the virus.  This happens because virus protects the two hidden ,system files called d.com and autorun,inf which are created by amvo.exe and amvo0.dll , amvo1.dll which resides in system32 folder on the OS drive (hard disk partition on which windows operating system is installed).

                In order to fix the problems caused by this virus ,you will need to delete all these files created by the virus.  Follow the set of commands to delete these files

1. Open Start>>Run and type cmd and press enter. This will open windows command prompt window. On this window, type as directed in steps further and press enter at the end of each step.

2. type cd\

3. type cd windows\system32

4. type attrib -r -h -s amvo.exe

5. type del amvo.exe

6. type attrib -r -h -s avmo0.dll ,repeat the steps 5 and 6 again to delete avmo1.dll

7. now type d: and press enter for d: drive partition.

8. type attrib -r -h -s autorun.inf

9. type del autorun.inf

10. type attrib -r -h -s d.com

11. type del d.com

Similarly repeat from steps 8 to 11 for all your hard disk partitions to remove the files created by the virus.

                                                   OR

1. First download Trend Micro HijackThis from here

2. Install and run the scan ,you will see an entry like this :

HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe

3. Check the above entry and click on the button which says Fix Checked and click yes on the prompt.

4. Uncheck amvo.exe from msconfig>> startup (type msconfig in run and click on the startup tab) also and restart your system

5. Open my computer and go to folder options >> check the option show hidden files and folders. Also un-check the option Hide protected operating system files (This will give a warning message, confirm by pressing yes button). After this click Ok.

6. Now access all your system drives by typing the drive letters in the address bar (for example c:) and delete the files like autorun.inf and other file with a name ms18us.exe (sorry but I am not sure about the second file name )

7. Also delete the files amvo.dll and amvo1.dll from windows/system32 folder.

Thats it..............

4)Not able to open drives on hard disk by double click

1. Open Start>>Run and type cmd and press enter. This will open a command prompt window. On this command prompt window type the following steps.

2. type cd\

3. type attrib -r -h -s autorun.inf

4. type del autorun.inf

5. now type d: and press enter for d: drive partition.

Now repeat steps 3 and 4. Similarly repeat step 5 for all your hard disk partition.

Restart your system and your trouble will be fixed.

5) Command Prompt Disabled

The simplest method to get your command prompt back is to add a registry key , but you should be having registry editing is enabled.

1. Open Start >> Run and type the following command ( or just copy it )

REG add HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 0 /f

2. Copy the above command and press Enter.  This will solve your trouble and your command prompt will be enabled.   Note: Method 1 may not work when your system is severely infected by a virus and even the registry editing is disabled due to which you are not able to run the above command from run prompt.

 Method 2: It involves a tool called RRT - Remove Restrictions Tool by sergiwa which can enable the disabled command prompt by virus.