Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Folder won't delete

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby random/random » May 9th, 2007, 1:52 pm

Copy/paste the following quote box into a new notepad (not wordpad) document. Make sure that wordwrap is turned off.

attrib -r -h -s "F:\Program Files\MyWay"
RMDIR /Q /S "F:\Program Files\MyWay"


Save it to your Desktop as cleanup.bat. Save it as:
File Type: All Files (not as a text document or it wont work).
Name: cleanup.bat

Locate cleanup.bat on your Desktop and double-click it. A DOS window will open briefly and then close, this is normal

Let me know if this removes the myway folder
User avatar
random/random
Developer
Developer
 
Posts: 7723
Joined: December 18th, 2005, 3:30 pm
Advertisement
Register to Remove

Folder is now clean!

Unread postby earlofsabden » May 9th, 2007, 5:57 pm

Yes, that worked.

The only problem (TINY PROBLEM) compared to the one I've just encountered is that the folder says "Empty", when I tried deleting the NOW (Thank you so much ) empty folder it contains 2 hidden files; I can see these hidden files but message "on the way" to Recycle Bin saysthe file names are too long to enter the Recycle Bin; Never seen that message before????.... Not that bothered really, but if you know how to solve that too, that would be great.

Many many many thanks. You provide a wonderful, helpful and peace-of-mind service.

If I could ask another Question..... I know it doesn't relate to Malware, but after running a scan from superantispyware.com, and I only did that to try and rid myself of this infected folder...... My MS Access shortcuts on the desktop (years of work) were deleted, I asked WHY in their forum but they insisted they (the software) wouldn't have done that. All I want are the MS Access shortcuts back, they must be somewhere on the hard drive?

But thanks again, and If I can donate anything to this service I would gladly do that for all the expert, positive help you have provided me with.

Other guy's in the pcadvisor forum are watching this post with interest, a member their provided me with this site for help.

Regards.... Neil Wilkinson, Blackburn, Lancashire, UK.
earlofsabden
Active Member
 
Posts: 11
Joined: April 29th, 2007, 5:11 pm
Location: Blackburn

Unread postby random/random » May 10th, 2007, 1:18 pm

The only problem (TINY PROBLEM) compared to the one I've just encountered is that the folder says "Empty", when I tried deleting the NOW (Thank you so much ) empty folder it contains 2 hidden files; I can see these hidden files but message "on the way" to Recycle Bin saysthe file names are too long to enter the Recycle Bin; Never seen that message before????.... Not that bothered really, but if you know how to solve that too, that would be great


Select the folder/file you want to delete, hold down shift, press delete, click yes, this will bypass the recycle bin. If that doesn't work let me know

If I could ask another Question..... I know it doesn't relate to Malware, but after running a scan from superantispyware.com, and I only did that to try and rid myself of this infected folder...... My MS Access shortcuts on the desktop (years of work) were deleted, I asked WHY in their forum but they insisted they (the software) wouldn't have done that. All I want are the MS Access shortcuts back, they must be somewhere on the hard drive?


If superantispyware removed them they should be in its quarantine, and you should be able to restore them

Many many many thanks. You provide a wonderful, helpful and peace-of-mind service.
But thanks again, and If I can donate anything to this service I would gladly do that for all the expert, positive help you have provided me with.



Other guy's in the pcadvisor forum are watching this post with interest, a member their provided me with this site for help.



Regards.... Neil Wilkinson, Blackburn, Lancashire, UK.


Thanks, you can donate here:

http://www.malwareremoval.com/donations.html

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.

Updating Java:
  • Download the latest version of Java Runtime Environment (JRE) 6.
  • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on the download to install the newest version.

You now appear to be clean. Congratulations!

Please take the time to tell us what you would like to be done about the people who are behind all the problems you have had. We can only get something done about this if the people that we help, like you, are prepared to complain. We have a dedicated forum for collecting these complaints Malware Complaints, you need to be registered to post as unfortunately we were hit with too many spam posting to allow guest posting to continue just find your country room and register your complaint.

Below are some steps to follow in order to dramatically lower the chances of reinfection
You may have already implemented some of the steps below, however you should follow any steps that you have not already implemented
  1. Turn off System Restore.
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    Check Turn off System Restore.
    Click Apply, and then click OK.

    Reboot.

    Turn ON System Restore.
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    UN-Check *Turn off System Restore*.
    Click Apply, and then click OK.
    NOTE: only do this ONCE,NOT on a regular basis
  2. Keep your antivirus updated
  3. Use a firewall
    While the firewall built into windows XP will protect you from incoming attacks, it will not monitor outgoing connections
    It is therefore recommended that you install one of the following firewalls
    Sunbelt kerio personal firewall
    Zonealarm
  4. Keep windows up to date with the latest patches


    IMPORTANT: You Need to Update Windows and Internet Explorer to protect your computer from the malware that is around on the Internet. Please go to the windows update site to get the critical updates.

    If you are running Microsoft Office, or any portion thereof, go to the Microsoft's Office Update site and make sure you have at least all the critical updates installed (Free) Microsoft Office Update.
  5. Install spywareblaster
    Spyware blaster is a program that stops known malicious activex controls from installing on your computer. It works by changing settings in your registry. It makes
    kill bits
    in the registry, so that certain activex controls can't install.
    If you don't know what activex controls are, see here
    You can download SpywareBlaster here here
    Make sure to update it on a regular basis
  6. Install IE-SPYAD
    Dowload and instructions located here
    Make sure to update it on a regular basis
  7. Use a HOSTS file
    • Every version of windows has a hosts file as part of them.
    • In a very basic sense, they are used to locate webpages.
    • We can customize a hosts file so that it blocks certain webpages.
    • However, it can slow down certain computers.
    • This is why using a hosts file is optional!!
    Download it here. Make sure you read the instructions on how to install the hosts file. There is a good tutorial here
    If you decide to download the hosts file, the slowdown problems can usually be avoided by following these steps:
    1. Click the start button (at the lower left hand corner of your screen)
    2. Click run
    3. In the dialog box, type services.msc
    4. hit enter, then locate dns client
    5. Highlight it, then double-click it.
    6. On the dropdown box, change the setting from automatic to manual.
    7. Click ok
  8. Install and use Ad-aware & Spybot search & destroy
    Instructions are located here
    Make sure to update them on a regular basis
  9. Most exploits are aimed at internet explorer, so I recommend you switch to an altenative browser
    Two good alternative browsers are
    Firefox
    Opera
    It is essential to update to the latest version of your browser, as the updates fix known security holes
  10. Even if you do decide to switch to another browser, it is still a good idea to lock down Internet explorer
    This can be done by following these simple instructions:
    From within Internet Explorer click on the Tools menu and then click on Options.
    Click once on the Security tab
    Click once on the Internet icon so it becomes highlighted.
    Click once on the Custom Level button.
    Change the Download signed ActiveX controls to Prompt
    Change the Download unsigned ActiveX controls to Disable
    Change the Initialize and script ActiveX controls not marked as safe to Disable
    Change the Installation of desktop items to Prompt
    Change the Launching programs and files in an IFRAME to Prompt
    Change the Navigate sub-frames across different domains to Prompt
    Change the allow paste operations via script to Disable
    When all these settings have been made, click on the OK button.
    If it prompts you as to whether or not you want to save the settings, press the Yes button.
    Next press the Apply button and then the OK to exit the Internet Properties page.
  11. Clean out you temp file on a regular basis
    I use and recommend ATF Cleaner by Attribune
    To use it, follow these instructions
    • Double-click ATF-Cleaner.exe to run the program.
    • Click Main at the top and choose Select All from the list.
    • Click the Empty Selected button.
    If you use Firefox browser:
    • Click Firefox at the top and choose Select All from the list.
    • Click the Empty Selected button.
    • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    If you use Opera browser:
    • Click Opera at the top and choose Select All from the list.
    • Click the Empty Selected button.
    • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    Click Exit on the Main menu to close the program.
  12. Finally I am trying to make one point very clear. It is absolutely essential to keep all of your security programs up to date
User avatar
random/random
Developer
Developer
 
Posts: 7723
Joined: December 18th, 2005, 3:30 pm

superantispyware

Unread postby earlofsabden » May 11th, 2007, 6:24 am

I cannot restore the items MS ACCESS desktop shortcuts from quarenteen because after I realised they had gone I did a system restore point which deleted the superantispyware program. Is there any other progam that can recover these files, thanks; Neil.
earlofsabden
Active Member
 
Posts: 11
Joined: April 29th, 2007, 5:11 pm
Location: Blackburn

Unread postby random/random » May 11th, 2007, 12:38 pm

There's nothing with any high chance of success

You could try recuva

http://www.recuva.com/

It's from the same people who wrote ccleaner
User avatar
random/random
Developer
Developer
 
Posts: 7723
Joined: December 18th, 2005, 3:30 pm

Recovery Success

Unread postby earlofsabden » May 13th, 2007, 4:41 pm

Recuva found the missing Access database but when I selected it and clicked "recover" I choose the desktop but now on trying to open the database it says that it is an unregconized database format, tried to "compact" and "repair" it through MS Access but to no joy...

Any ideas, regards.... Neil.
earlofsabden
Active Member
 
Posts: 11
Joined: April 29th, 2007, 5:11 pm
Location: Blackburn

Unread postby random/random » May 13th, 2007, 4:44 pm

Unfortunately, no :(

You could try asking in the pcadvisor forums - they may have someone with a lot more expertise in data recovery

If the data is very important, you might consider sending it off to be recovered professionally - but this is very expensive (I think it starts from about £500)
User avatar
random/random
Developer
Developer
 
Posts: 7723
Joined: December 18th, 2005, 3:30 pm

Thanks

Unread postby earlofsabden » May 13th, 2007, 5:09 pm

OK thanks, I will try that!

Thank you for all your advise with my malware problem.

I will use PayPal to donate to this very worthwhile and effective forum.

Rgards.... Neil.
earlofsabden
Active Member
 
Posts: 11
Joined: April 29th, 2007, 5:11 pm
Location: Blackburn

Unread postby random/random » May 22nd, 2007, 12:10 pm

Glad we could be of assistance.

This topic is now closed. If you wish it
reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.


You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
random/random
Developer
Developer
 
Posts: 7723
Joined: December 18th, 2005, 3:30 pm
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 24 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware