cancel
Showing results for 
Search instead for 
Did you mean: 

Re: XP Repair Tool virus

Jump to solution

May have spoken too soon. McAfee has picked up TDSS.e!RootKit. I've run a scan and it claims to have removed it. Are these two related?

kuttus
Level 9
Report Inappropriate Content
Message 32 of 33

Re: XP Repair Tool virus

Jump to solution

If one compuiter is infected with System Repair, WinXPRecovery, XP Security,XP Removal Tool,   in most of the cases we are losing the Start menu Shortcuts and the infection is hiding all of our personal as well the system files. Please go through the below steps so that we can fix that issues.

Please select the Tools menu and click Folder Options.

After the new window appears select the View tab.

Put a checkmark in the checkbox labeled Display the contents of system folders.

Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.

Remove the checkmark from the checkbox labeled Hide file extensions for known file types.

Remove the checkmark from the checkbox labeled Hide protected operating system files.

After this please press the Apply button and then the OK

Press on the key Alt+Crtl+Delete key on the keyboard. Now you will get a new window called Task Manager.  Now hold the Ctrl key on the key board and click on File, New Task on the Task Manager.  Now you will get a new black window.

Inside that black window type CD/ and hit on enter.

Now type ATTRIB –H –R –S /S /D and hit on enter.

Associated System Restore Files:

%LocalAppData%\<random>

%LocalAppData%\<random>.exe

%LocalAppData%\~<random>

%LocalAppData%\~<random>

%StartMenu%\Programs\System Restore\

%StartMenu%\Programs\System Restore\System Restore.lnk

%StartMenu%\Programs\System Restore\Uninstall System Restore.lnk

%Temp%\smtmp\

%Temp%\smtmp\1

%Temp%\smtmp\1

%Temp%\smtmp\2

%Temp%\smtmp\3

%Temp%\smtmp\4

%UserProfile%\Desktop\System Restore.lnk

Don't delete the folder

%Temp%\smtmp\

%Temp%\smtmp\1

%Temp%\smtmp\1

%Temp%\smtmp\2

%Temp%\smtmp\3

%Temp%\smtmp\4

These are the shortcuts in your start Menu.

If you delete these folders you will lose all of the shortcuts in the start menu. First take a back up of these folder

%Temp%\smtmp\

Highlighted
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 33 of 33

Re: XP Repair Tool virus

Jump to solution

Old thread, locking.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community