Jul 27, 2011

Newfolder.exe Virus Remove

How To Remove Newfolder.exe Virus?
 What is Newfolder.exe?
The real name of this virus is Iddono. This threat copies its file(s) to your hard disk. Its typical file name is Iddono.
Then it creates new startup key with name Iddono and value newfolder.exe.
You can also find it in your processes list with name newfolder.exe or Iddono.
This virus is very difficult to eliminate manually, but you can find solution for removal by scanning with Spy Emergency 2010 Manual Solution:
Step1: 1. Search for autorun.inf file. It is a read only file so you will have to change it to normal by right clicking the file , selecting the properties and un-check the read only option
2. Open the file in notepad and delete everything and save the file.
3. Now change the file status back to read only mode so that the virus could not get access again.
4. Autorun
5. Click start->run and type msconfig and click ok
6. Go to startup tab look for regsvr and uncheck the option click OK.
7. Click on Exit without Restart, cause there are still few things we need to do before we can restart the PC. 8. Now go to control panel -> scheduled tasks, and delete the At1 task listed there.
Step2: 1. Click on start -> run and type gpedit.msc and click Ok.
2. 3. If you are Windows XP Home Edition user you might not have gpedit.msc in that case download and install it from Windows XP Home Edition: gpedit.msc and then follow these steps.
4. Go to users configuration->Administrative templates->system
5. Find “prevent access to registry editing tools” and change the option to disable.
6. Opening the gate of castle: Group Edit Policies
7. Once you do this you have registry access back.
Step3: 1. Click on start->run and type regedit and click ok
2. Go to edit->find and start the search for regsvr.exe,
3. Launch the attack in the heart of castle: registry search
4. Delete all the occurrence of regsvr.exe; remember to take a backup before deleting. KEEP IN MIND regsvr32.exe is not to be deleted. Delete regsvr.exe occurrences only.
5. At one ore two places you will find it after explorer.exe in theses cases only delete the regsvr.exe part and not the whole part. E.g. Shell = “Explorer.exe regsvr.exe” the just delete the regsvr.exe and leave the explorer.exe
Step4: 1. Click on start->search->for files and folders.
2. Their click all files and folders
3. Type “*.exe” as filename to search for
4. Click on „when was it modified „ option and select the specify date option
5. Type from date as 1/31/2008 and also type To date as 1/31/2008
6. Seek and destory enemy soldiers: the search option
7. Now hit search and wait for all the exe‟s to show up.
8. Once search is over select all the exe files and shift+delete the files, caution must be taken so that you don‟t delete the legitimate exe file that you have installed on 31st January.
9. Also selecting lot of files together might make your computer unresponsive so delete them in small bunches. 10. Also find and delete regsvr.exe, svchost .exe( notice an extra space between the svchost and .exe) Step5: 1. Now do a cold reboot (ie press the reboot button instead) and you are done.

19 comments:

Anonymous said...

I like the valuable information you supply to your articles.
I will bookmark your blog and take a look at again
right here frequently. I'm quite certain I will be told a lot of new stuff right right here! Best of luck for the next!

Feel free to visit my weblog atlanta seo expert

Anonymous said...

I have been exploring for a bit for any high-quality articles
or blog posts in this kind of house . Exploring in
Yahoo I finally stumbled upon this web site.
Reading this info So i am glad to exhibit that I have
a very good uncanny feeling I came upon just what I needed.
I such a lot definitely will make sure to do not fail to remember
this website and provides it a look regularly.

Here is my webpage: katalog kleidung

Anonymous said...

Hi to all, the contents present at this web site are actually amazing for people knowledge, well, keep up the good work fellows.


Here is my site - online shop clothes

Anonymous said...

We are a gaggle of volunteers and opening a new scheme in our community.
Your web site offered us with helpful info to work on. You have done an impressive job and
our whole neighborhood can be thankful to you.


my web page: island vacations with kids

Anonymous said...

This post presents clear idea designed for the new viewers of blogging,
that really how to do blogging and site-building.


Feel free to visit my page - home equity loan vs line of credit

Anonymous said...

excellent points altogether, you simply received a brand new reader.
What would you recommend in regards to your publish that you just made a few days
ago? Any certain?

my weblog :: Private Krankenversicherung Vergleich Kostenlos

Anonymous said...

Having read this I thought it was really informative.
I appreciate you spending some time and effort to put this information
together. I once again find myself personally spending way too much time both reading and commenting.

But so what, it was still worth it!

Here is my website :: click through the up coming document

Anonymous said...

hey there and thank you for your info – I've definitely picked up anything new from right here. I did however expertise a few technical points using this site, as I experienced to reload the website lots of times previous to I could get it to load correctly. I had been wondering if your hosting is OK? Not that I am complaining, but sluggish loading instances times will sometimes affect your placement in google and could damage your high quality score if advertising and marketing with Adwords. Anyway I am adding this RSS to my e-mail and could look out for much more of your respective interesting content. Make sure you update this again very soon.

Take a look at my web-site :: How to find a work at home job

Anonymous said...

Excellent post. I was checking continuously this weblog and I am impressed!
Very useful information specially the ultimate part :
) I handle such info a lot. I used to be looking for this particular
info for a long time. Thanks and good luck.

Here is my webpage ... loans consolidated

Anonymous said...

It's a pity you don't have a donate button! I'd without a doubt donate to this outstanding blog! I guess for now i'll
settle for book-marking and adding your RSS feed to my Google
account. I look forward to fresh updates and will talk about this blog with my
Facebook group. Talk soon!

Also visit my web page :: Business plan

Anonymous said...

That is really fascinating, You're an excessively skilled blogger. I've joined your feed and look ahead to in quest of more of your fantastic post.
Also, I've shared your web site in my social networks

My webpage ... GüNstigste Privatversicherung

Anonymous said...

This website was... how do you say it? Relevant!! Finally I've found something which helped me. Many thanks!

my webpage new business ideas for students

Anonymous said...

Simply desire to say your article is as surprising.
The clarity to your publish is simply nice and i could suppose you're knowledgeable on this subject. Fine along with your permission allow me to grasp your feed to keep updated with forthcoming post. Thank you one million and please keep up the enjoyable work.

Also visit my webpage :: long beach island vacation rentals

Anonymous said...

Can I simply just say what a comfort to discover a person that genuinely understands what they're talking about on the internet. You definitely know how to bring an issue to light and make it important. More people should check this out and understand this side of the story. I was surprised that you are not more popular because you definitely possess the gift.

my page: home equity loan refinance credit

Anonymous said...

I read this piece of writing fully about the comparison of most recent and earlier technologies, it's amazing article.

Feel free to visit my blog post free web hosting reseller

Anonymous said...

Heya! I just wanted to ask if you ever have any problems with hackers?
My last blog (wordpress) was hacked and I ended up
losing a few months of hard work due to no back
up. Do you have any methods to protect against hackers?


my web page ... work from home jobs for moms

Anonymous said...

Hi there! I could have sworn I've visited this web site before but after looking at a few of the articles I realized it's new to me.
Regardless, I'm certainly delighted I discovered it and I'll
be book-marking it and checking back often!

my web blog - online jobs for stay at home mothers

Anonymous said...

Hello, i read your blog from time to time and i own a similar one
and i was just wondering if you get a lot of spam feedback?

If so how do you reduce it, any plugin or anything you can suggest?
I get so much lately it's driving me crazy so any support is very much appreciated.

Here is my web site fashion online outlet

oakleyses said...

ugg boots, louis vuitton, air max, nike air max, ray ban sunglasses, polo ralph lauren outlet online, tory burch outlet, louis vuitton, christian louboutin uk, oakley sunglasses, jordan pas cher, louis vuitton outlet, longchamp outlet, polo ralph lauren, polo outlet, michael kors pas cher, cheap oakley sunglasses, sac longchamp pas cher, kate spade outlet, replica watches, longchamp pas cher, ray ban sunglasses, tiffany and co, uggs on sale, louboutin pas cher, louis vuitton outlet, oakley sunglasses wholesale, christian louboutin outlet, nike free run, nike outlet, prada outlet, ugg boots, gucci handbags, tiffany jewelry, chanel handbags, nike free, oakley sunglasses, ray ban sunglasses, nike air max, christian louboutin, replica watches, longchamp outlet, longchamp outlet, louis vuitton outlet, jordan shoes, prada handbags, nike roshe, oakley sunglasses, christian louboutin shoes