Fix for virus - Trojan.Packed.NsAnti

[danny_ranjeev]

Hello !!
Can anyone please tell me a fix for Trojan.Packed.NsAnti. I've used Norton but it just can't remove it. The virus copies itself onto any media that i plug it into !!! And it is preventing me from viewing my hidden files !! Please help me ut here !!
There are essentially two files of this virus
1. autorun.inf
2. ipy.cmd

[P455w0rd_Cr4kz]

sometimes it takes to scan,delete the virus,then you disable manually the system restore,restart your pc in safe mode and do a full scan once more. That's a 50% more 0f success.
Good luck

[danny_ranjeev]

Thanx i'll give it a shot

[XXxxImmortalxxXX]

spybot search and destroy usually helps one thing ive noticed about norton is that it sucks i had 2 viruses once and norton picked it up tryed to delete and it couldnt download spy bot search and destroy and it fixed it first scan

[GreenGrass]

I dont know really hope mabye this help..

Press "Ctrl+Alt+Delete" when you are in Task Manager. Then click on Processes.
When you are there try to find the file the virus is running in.
When you have detected the file you should "End The Processes" of that file.
Next step is to open up "REGEDIT.EXE". Go "START" and "RUN" type "regedit"
When you have your regedit open, you should try to find the virus files in there and delete them.
when you do something in the "Registy" you must always back it up because if you delete wrong key you may
screw up the whole system. When you have made a backup you should go into all the "paths". I type below here
and try to look for the virus file. Also delete the key if you find it. You may use "google" to help find the files.
path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce
path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnceEx
path: HKEY_CURRENT_USER\SOFTAWRE\Microsoft\Windows\Curre ntVersion\Run
path: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\RunOnce
When you have deleted all the virus keys You should go "START" and "RUN" type "CMD".
When you are in "command Prompt" you should type "regsvr32 (virus file name)
If you find the file exists you must delete it. If you don't find it its ok.

[XXxxImmortalxxXX]

very very good greengrass

[GreenGrass]

The Virus disable "System Restore" to fix this do this >>

Press "START go "RUN" type "REGEDIT.EXE" and hit ok.
when you are in there you should go to this path:
path: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore
you must delete 2 values.
Delete "DisableConfig" and "DisableSR"
or you may change the value to 0.
0 = Enable
1 = Disable
when you have done that, your system restore should work as normal.

[XXxxImmortalxxXX]

nice

[GreenGrass]

Thanks alot XXxxImmortalxxXX for the comments

[frekdude]

hey frens i have problem,
when i go to run and to command prompt my computer shows auto shutdown message, is that due to virus any solution for this.