How To Remove win32 virus
How to remove win32 virus - that turns your files and folders into shortcuts
The virus is actually a Trojan. It hides all your files in the external drive or sometimes in the main hard drive and creates a shortcut link to the hidden files. Once you click on the shortcut, you have activated the Trojan.
To remove the virus;
1. Open task manager(check our previous post to see how). Click on processes and end Wnscript process.
2. On the start menu, type REGEDIT and press enter to Open registry editor.
3. Click on HKEY_CURRENT_USER -Click on Software- Then click on Microsoft. Click on Windows- click on CurrentVersion, and finally click on Run.
4. Search for files that end with " .vbs" on the reference and get the location of the file.
5. Locate the file in file explorer(you can type the file name in the search bar) and delete it, then come back and delete the reference on the registry editor, you have cleared the virus from your system.
To recover your files that are converted to shortcuts on the external drives.
6. Open the folder that contains the hidden files/folders
7. Click on tools, -click folder options, -Select view.
8. Click on Hidden files and folders and select Show hidden files, folders and drives.
9. Unselect hide extension for known file types.
10. Unselect hide protected operating system files.
Click ok.
All your hidden files will appear and you can copy them to a safe location.
~Copied but verified~
NOTE:
Once the Trojan is activated, you may not completely wipe it off from your drive untill you format the drive.
These steps are meant to guide you to recover your files, therefore do not format untill all needed files are recovered.
Send us a direct message if you're having difficulties in any of the steps.
Like and share if you find this useful.
The virus is actually a Trojan. It hides all your files in the external drive or sometimes in the main hard drive and creates a shortcut link to the hidden files. Once you click on the shortcut, you have activated the Trojan.
To remove the virus;
1. Open task manager(check our previous post to see how). Click on processes and end Wnscript process.
2. On the start menu, type REGEDIT and press enter to Open registry editor.
3. Click on HKEY_CURRENT_USER -Click on Software- Then click on Microsoft. Click on Windows- click on CurrentVersion, and finally click on Run.
4. Search for files that end with " .vbs" on the reference and get the location of the file.
5. Locate the file in file explorer(you can type the file name in the search bar) and delete it, then come back and delete the reference on the registry editor, you have cleared the virus from your system.
To recover your files that are converted to shortcuts on the external drives.
6. Open the folder that contains the hidden files/folders
7. Click on tools, -click folder options, -Select view.
8. Click on Hidden files and folders and select Show hidden files, folders and drives.
9. Unselect hide extension for known file types.
10. Unselect hide protected operating system files.
Click ok.
All your hidden files will appear and you can copy them to a safe location.
~Copied but verified~
NOTE:
Once the Trojan is activated, you may not completely wipe it off from your drive untill you format the drive.
These steps are meant to guide you to recover your files, therefore do not format untill all needed files are recovered.
Send us a direct message if you're having difficulties in any of the steps.
Like and share if you find this useful.
Comments
Post a Comment