Home > Windows > How to remove the ntde1ect.com and autorun.inf files

How to remove the ntde1ect.com and autorun.inf files

A week ago my system got infected by either the Win32/Pacex virus or the Win32/PSW.Agent.NDP trojan and made it a mess.What it did was, it created following three files in each of my 5 hard disk patitions and set their attributes to hidden.

avpo.exe

ntde1ect.com

autorun.inf

As a result my pc became slow and started to become unresponsive at times.A view of task manager(CLT+ALT+DEL) revealed that these above mentioned files are running without my knowledge.So i went on the hunt to delete these files manually as my Avast Antivirus was unable to delete it.

Whenever i deleted autorun.inf in my C: drive,it would reappear after sometime as i was unaware that the files are running in other drives as well.

So i searched the web and found

Removing the ntde1ect.com and autorun.inf files

to be very well written in simple words.It does the magic by means of command prompt and any beginner can do it easily.

Plus a comment in the end by Sergey tells us how to make Show hidden files & folders” work normally which says:

* Click “Start” -> “Run…” (or press Windows key + R)
* Type “regedit” and click “Ok”.
* Find the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Advanced\Folder\Hidden\SHOWALL

* Look at the “CheckedValue” key… This should be a DWORD key. If it isn’t, delete the key.
* Create a new key called “CheckedValue” as a DWORD (hexadecimal) with a value of 1.

* The “Show hidden files & folders” check box should now work normally.

Enjoy!

Advertisements
Categories: Windows
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: