Filipino Computer Hardware Servicing Technician from Roxas, City Capiz Philippines (Region 6 Western Visayas) for more information contact me via email at renanorola@hotmail.com

Home » Archives » 25. January 2008

how to remove ntde1ect and autorun.inf

January 25, 2008

How to remove the ntde1ect.com and autorun.inf files

There is a Trojan/virus (either the Win32/Pacex virus or the Win32/PSW.Agent.NDP trojan) that uses the two files ntde1ect and autorun.inf Here is how you can get rid of them

  • Open Task Manager and in Processes tab end explorer.exe and wscript.exe process
  • Open up File –> New Task (Run) in the Task manager
  • Type cmd and hit Enter
  • Type
    del /a:h /f c:\autorun.*
  • Go to your Windows\System32 directory by typing cd c:\windows\system32
    Type dir /a:h /f avp*.*
     If you see any files names avpo.dll or avpo.exe or avpo.exe, use the     

Del /a:h /f avpo.exe

  • Open up File –> New Task (Run) in the Task manager, Type regedit
  • Navigate to HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    If there are any entries for avpo.exe, delete them.
    Do a complete search of your registry for ntdelect.com and delete any entries you find.
  • To Restore Folder Options Settings, Navigate to
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\

          Explorer\Advanced\Folder\Hidden\SHOWALL

         Look at the “CheckedValue” key… This should be a DWORD key. If it isn’t,  delete the key.Create a new key called “CheckedValue” as a DWORD (hexadecimal) with a value of 1. The “Show hidden files & folders” check box should now work normally.

 

Posted by renanorola at 6:00 pm | permalink | Add comment

What is autorun.inf

I wouldn’t say that it is obviously not a virus. True, Autorun.inf files are usually located on CDs or other media to instruct the computer how to start them when they are inserted.

being an .inf file, you can open it in Notepad to see if it is doing anything nasty. If you post back it’s path & contents we can better diagnose the situation. You can reference to the site for a better understanding of autorun.inf: http://en.wikipedia.org/wiki/Autorun
You computer must run very slow with two Anti-virus software loaded. These two with be conflicted to each other all the time as one of them treating another as virus software. Remove one that you don’t like and keep one only on your computer.

Posted by renanorola at 9:00 am | permalink | Add comment

Network Troubleshooting

Troubleshooting can account for as much as 90 percent of a network administrator’s job. Good troubleshooting skills enable you to respond quickly in a crisis situation and keep your netowork running smoothly. When you face a troubleshooting challenge, start by asking yourself basic questions. What has changed?  Has this problem occured before, an id so, when? IS the problem repruducible? Did the user do anything differently? Are other users experiencing  the same problem?

    Next try to isolate the problems, cutting it in half with each step you can take to get closer to its source. For example if a workstation can’t connect to the network, try to determine whether your’re facing a networkwide problem or a workstation specific problem. Even you can find a solution isoltating the problem will save a tremendous amoung of time when you seek outsie help.

     To give you an idea of how this process works, I’ve gathered several troublshooting scenarios, ranging from common but simple problems to more difficult challenges. You might run into similar situation in which you can apply some of the baci questions that I use to isolate the problems in these examples.

Posted by renanorola at 8:30 am | permalink | Add comment