The consequence of this is that you will not be able to view the applications running on your computer and end these applications if they are not responding!
A good updated anti-virus should remove this virus BUT, remember an antivirus just removes the virus but doesn't restore the changes made by it!!
There are two ways to restore settings-
1)
a.Go to start menu, click on RUN.
b.Type gpedit.msc
c.You must get a Group Policy window displayed against you-
(Click on the image for an enlarged view)
d.Go to Administrative templates>System>Control+Alt+Delete options>remove task manager.
e.You get an option to disable it, if it is not configured.
f.You are done with it! The next time you run the task manager it shouldn't show error messages as before.
2)If the above one doesn't work then you need certain tools to remove the restrictions
What are all these?
A Process explorer is a similar kind of tool as that of Windows Task Manager, it enables you to view the processes running on your machine and stop them.
An RRT is one with which you can restrict the acts performed by your virus(such as disabling the task manager)
Hijackthis is a hacker that detects and removes the target methods used by most of the hijackers.
How to remove them now?
If you have downloaded these tools, then follow the instructons(better if you run them in safe mode)-
a.Go to start menu, select run; type processxp.exe and kill all the processes that has the icon of a folder (Remember, no process will have an icon of a folder: that's actually a virus)!
b.Run rrt.exe, select all the restrictions and remove them by clicking remove button(donot restart now).
(Click on the image for an enlarged view)
c.Once you are done with it, run hijackthis.exe, do a system safe scan and click on fix save changes.
(Click on the image for an enlarged view)
Now you have successfully restored all the changes made by the virus,
reboot the system and you have now got rid of it!
No comments:
Post a Comment