Be successful!

1. Click “Start” -> “Run…” (or press Windows key + R)
2. Type “regedit” and click “Ok”.
3. Find the key : [sourcecode language='html']HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL[/sourcecode]
4. Look at the “CheckedValue” key… This should be a DWORD key. If it isn’t, delete the key.
5. Create a new key called “CheckedValue” as a DWORD (hexadecimal) with a value of 1.
6. The “Show hidden files & folders” check box should now work normally. Enjoy!

Here is solution from the Microsoft article about enabling the task manager :

Enabling Task Manager from Group Policy Editor
1. Go to “Start” -> “Run” -> Write [sourcecode language='html']Gpedit.msc[/sourcecode] and press on “Enter” button.
2. Navigate to “User Configuration” -> “Administrative Templates” -> “System” -> “Ctrl+Alt+Del Options”
3. In the right side of the screen verity that “Remove Task Manager”” option set to “Disable” or “Not Configured”.
4. Close “Gpedit.msc” MMC.
5. Go to “Start” -> “Run” -> Write [sourcecode language='html']gpupdate /force[/sourcecode] and press on “Enter” button.

Enabling Task Manager from Registry Editor
1. Go to “Start” -> “Run” -> Write [sourcecode language='html']regedit[/sourcecode] and press on “Enter” button.
Warning: Modifying your registry can cause serious problems that may require you to reinstall your operating system.
Always backup your files before doing this registry hack.
2. Navigate to the following registry keys and verity that following settings set to default :
Windows Registry Editor Version 5.00
[sourcecode language='html'][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]“DisableTaskMgr”=dword:00000000
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionGroupPolicyObjectsLocalUserSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]“DisableTaskMgr”=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciessystem]“DisableTaskMgr”=dword:00000000
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogon]“DisableCAD”=dword:00000000[/sourcecode]
3. Reboot the computer.

For your convenience, I have created a registry file. Just download, double click it and add the info to your registry. The task manager will be enabled. Post your experiences please.

Download the registry file here

Enabling Task Manager from the Run Menu

Abdullah mailed me this solution. Go to Start –> Run and copy and paste the following and press OK.

[sourcecode language='html']REG add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableTaskMgr /t REG_DWORD /d 0 /f[/sourcecode]

• Open Task Manager and in Processes tab end explorer.exe and wscript.exe process
• Open up File –> New Task (Run) in the Task manager
• Type cmd and hit Enter
• Type

[sourcecode language='html']del /a:h /f c:autorun.*[/sourcecode]

• Go to your WindowsSystem32 directory by typing

[sourcecode language='html']cd c:windowssystem32[/sourcecode]

• Type

[sourcecode language='html']dir /a:h /f avp*.*[/sourcecode]

• If you see any files names avpo.dll or avpo.exe or avpo.exe, use the

[sourcecode language='html']Del /a:h /f avpo.exe[/sourcecode]

• Open up File –> New Task (Run) in the Task manager, Type

[sourcecode language='html']regedit[/sourcecode]

• Navigate to

[sourcecode language='html']HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun[/sourcecode]

• If there are any entries for avpo.exe, delete them.
• Do a complete search of your registry for ntdelect.com and delete any entries you find.
• To Restore Folder Options Settings, Navigate to

[sourcecode language='html']HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL[/sourcecode]

Look at the “CheckedValue” key. This should be a DWORD key. If it isn’t, delete the key. Create a new key called “CheckedValue” as a DWORD (hexadecimal) with a value of 1. The “Show hidden files & folders” check box should now work normally.

1- From Group Policy Editor

Go to Run –> gpedit.msc

In the left hand menu, go to User Config –> Administrative Templated –> System.

Now In the right hand pane, select “Prevent access to registry editing tools”. It will probably be not configured or enabled. If it’s enabled, disable it and if it’s not configured, first enable it, apply settings and then disable it. Most probably the settings have been applied instantly. If not, then run gpupdate in command prompt to apply the group policies.

2- From the Run Menu

I got this tweak while surfing the internet. Go to Start –> Run, copy and paste the follow in the Run box and press OK.

[sourcecode language='cpp']REG add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableRegistryTools /t REG_DWORD /d 0 /f[/sourcecode]

The effects are usually instant. If not then you should see the results after restarting your computer.

Please tell us your experiences on this tweak.

This virus affects your system by :

• Disabling Task Manager
• Disabling Registry Editor
• Creates a startup entry to start upon system start and
• Creates its own exe files in Shared Documents folder which appear like ordinary folders.
• Disables Folder Options
• Uses your 50% or more processor

You can see that the folders in Shared Documents have an exe extension If you have unchecked Hide extensions for known file types in Folder Options.

Virus Removal Tool Description 2.5 (Also Removes Nhatquanglan Variant of NewFolder.exe)

Sets these entries in Registry
[sourcecode language='cpp'][HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]“NofolderOptions”=[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]“@”=[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]“YahooMessengger”=[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogon]“Shell”=”Explorer.exe”[/sourcecode]

Deletes Virus Files

• svichossst.exe
• autorun.inf
• at1.job
• autorun.ini
• (Nhatquanglan) scvhosts.exe
• blastclnnn.exe
• hinhem.scr
• All duplicated exe files in Shared Documents Folder
• Also the exe files in your selected folder

Download

http://www.od3n.net/tools/

Go to registry editor by running regedit in the run box.

Go to this key:

[sourcecode language='cpp']HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced[/sourcecode]

In the right hand area, double click hidden and change the value to 1.

Now you’re all set to go. Check it in your tools menu if the changes have taken effect. Mine have already been fixed . Please spare a few moments from your precious time and tell us about your experiences.