| View previous topic :: View next topic |
| Author |
Message |
Man-e-faces
Joined: 19 Nov 2006
Location: Diagonally parked in a parallel universe.
|
 Posted: Mon Apr 21, 2008 4:30 pm Post subject: Computer and Powerpoint questions. |
 |
|
Morning all, hope you can help. I'm having a bit of trouble with my computer.
1. When I click on 'my computer' then 'c or d drive' it doesn't open it. I have to manually select windows explorer from a list to open it. It's the same when I tryto access a flash drive or external memory source.
Is there a way to fix it?
2. I have a lot of powerpoint templates but I can't get them on to the template selection area. I have to phsyically click the template from the folder in templates in microsoft office file.
Sorry if that isn't very clear.
Thanks in advance. |
|
| Back to top |
|
 |
JustJohn
Joined: 18 Oct 2007
Location: Your computer screen
|
| Posted: Mon Apr 21, 2008 5:59 pm Post subject: |
|
|
My school computers were doing that when they had a virus.
AVG or NOD32 and see what comes up. |
|
| Back to top |
|
|
ttompatz
Joined: 05 Sep 2005
Location: Kwangju, South Korea
|
| Posted: Mon Apr 21, 2008 6:01 pm Post subject: Re: Computer and Powerpoint questions. |
|
|
| Man-e-faces wrote: |
Morning all, hope you can help. I'm having a bit of trouble with my computer.
1. When I click on 'my computer' then 'c or d drive' it doesn't open it. I have to manually select windows explorer from a list to open it. It's the same when I tryto access a flash drive or external memory source.
Is there a way to fix it?
2. I have a lot of powerpoint templates but I can't get them on to the template selection area. I have to phsyically click the template from the folder in templates in microsoft office file.
Sorry if that isn't very clear.
Thanks in advance. |
Sounds like you have the kxvo.exe (or other related autorun.inf virus).
Removal is NOT difficult.
copy and paste the text from this to a word file and print it out then simply follow directions.
It is easy to fix and takes about 15 minutes if you follow the directions exactly.
Most of the common antivirus programs (Avast, Norton, Mcaffee, AVG) do NOT catch it. Twister anti-virus does catch it but I am not sure how great it is otherwise and it may not repair the registry.
Lately we discover a new Trojan/virus that uses autorun.inf to infect other drive. Most of the time it infect any removable media (external HDD or Flash Drive) that is connected to the infected unit. You will not notice it since the script runs at startup.
Note: This procedure is applicable to all Trojan/virus that uses a .inf file, but will use �hbq.exe� for this example:
Here is how you can get rid of them:
- Open Task Manager and in Processes tab end explorer.exe and wscript.exe process
- Open up File �> New Task (Run) in the Task manager
- Type cmd and hit Enter
Type
del /a:h /f c:\autorun.*
if you have multiple drive/partition, repeat this step to all drive/partition, make replacing �C:� with the appropriate drive letter.
- Go to your Windows\System32 directory by typing cd c:\windows\system32
Type dir /a:h /f hbq*.*
- If you see any files named hbq0.dll or hbq0.exe or hbo.exe, use the
Del /a:h /f avp*.exe
Del /a:h /f avp*.dll
to delete.
- Open up File �> New Task (Run) in the Task manager, Type regedit
- Navigate to:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
If there are any entries for kxvo.exe, delete them. Also delete all suspicious items
- Do a complete search of your registry for ntdelect.com or hbq.exe or kxvo.exe and delete any entries you find.
- To Restore Folder Options (�Show hidden files & folders�) Settings, Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Advanced\Folder\Hidden\SHOWALL
- Look at the �CheckedValue� key� This should be a DWORD key. If it isn�t, delete the key. Create a new key called �CheckedValue� as a DWORD (hexadecimal) with a value of 1. The �Show hidden files & folders� check box should now work normally.
. |
|
| Back to top |
|
|
mnhnhyouh
Joined: 21 Nov 2006
Location: The Middle Kingdom
|
| Posted: Mon Apr 21, 2008 6:07 pm Post subject: Re: Computer and Powerpoint questions. |
|
|
| ttompatz wrote: |
| Man-e-faces wrote: |
Morning all, hope you can help. I'm having a bit of trouble with my computer.
1. When I click on 'my computer' then 'c or d drive' it doesn't open it. I have to manually select windows explorer from a list to open it. It's the same when I tryto access a flash drive or external memory source.
Is there a way to fix it?
2. I have a lot of powerpoint templates but I can't get them on to the template selection area. I have to phsyically click the template from the folder in templates in microsoft office file.
Sorry if that isn't very clear.
Thanks in advance. |
Sounds like you have the kxvo.exe (or other related autorun.inf virus).
Removal is NOT difficult.
copy and paste the text from this to a word file and print it out then simply follow directions.
It is easy to fix and takes about 15 minutes if you follow the directions exactly.
Most of the common antivirus programs (Avast, Norton, Mcaffee, AVG) do NOT catch it. Twister anti-virus does catch it but I am not sure how great it is otherwise and it may not repair the registry.
Lately we discover a new Trojan/virus that uses autorun.inf to infect other drive. Most of the time it infect any removable media (external HDD or Flash Drive) that is connected to the infected unit. You will not notice it since the script runs at startup.
Note: This procedure is applicable to all Trojan/virus that uses a .inf file, but will use �hbq.exe� for this example:
Here is how you can get rid of them:
- Open Task Manager and in Processes tab end explorer.exe and wscript.exe process
- Open up File �> New Task (Run) in the Task manager
- Type cmd and hit Enter
Type
del /a:h /f c:\autorun.*
if you have multiple drive/partition, repeat this step to all drive/partition, make replacing �C:� with the appropriate drive letter.
- Go to your Windows\System32 directory by typing cd c:\windows\system32
Type dir /a:h /f hbq*.*
- If you see any files named hbq0.dll or hbq0.exe or hbo.exe, use the
Del /a:h /f avp*.exe
Del /a:h /f avp*.dll
to delete.
- Open up File �> New Task (Run) in the Task manager, Type regedit
- Navigate to:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
If there are any entries for kxvo.exe, delete them. Also delete all suspicious items
- Do a complete search of your registry for ntdelect.com or hbq.exe or kxvo.exe and delete any entries you find.
- To Restore Folder Options (�Show hidden files & folders�) Settings, Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Advanced\Folder\Hidden\SHOWALL
- Look at the �CheckedValue� key� This should be a DWORD key. If it isn�t, delete the key. Create a new key called �CheckedValue� as a DWORD (hexadecimal) with a value of 1. The �Show hidden files & folders� check box should now work normally.
. |
Can you provide a link for that please?
h |
|
| Back to top |
|
|
ttompatz
Joined: 05 Sep 2005
Location: Kwangju, South Korea
|
| Posted: Mon Apr 21, 2008 6:16 pm Post subject: |
|
|
I have first hand experience with this and have done this successfully on more than one occasion on different computers (all running different versions of XP) at work and at home.
I cannot speak to this problem on machines running win98 or Vista (no experience). These instructions are SPECIFIC to WinXP.
This does indeed work on XP machines.
IF you do not have the virus you will NOT cause a problem and you will NOT damage anything (like the O/S) by following the directions exactly. (there is nothing to delete or change if you do not have this or a related virus).
I also know from first hand experience that Norton, Mcaffee, AVG and Avast do NOT catch this particular flavor of virus/trojan.
. |
|
| Back to top |
|
|
Man-e-faces
Joined: 19 Nov 2006
Location: Diagonally parked in a parallel universe.
|
| Posted: Mon Apr 21, 2008 6:28 pm Post subject: |
|
|
Thanks for that. Sounds a bit complicated but I'll give it a shot.
Is it safe for an computer idiot to do or id recommended to get someone who knows what they are doing? |
|
| Back to top |
|
|
ttompatz
Joined: 05 Sep 2005
Location: Kwangju, South Korea
|
| Posted: Mon Apr 21, 2008 6:51 pm Post subject: |
|
|
| Man-e-faces wrote: |
Thanks for that. Sounds a bit complicated but I'll give it a shot.
Is it safe for an computer idiot to do or id recommended to get someone who knows what they are doing? |
Print and follow directions.
Easy to do, fairly explicit and pretty easy for a neophyte to do.
Unless you deviate from the directions you cannot harm your system. |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
