Wednesday 26 September 2012

How To remove New Folder virus

What is Newfolder.exe?
The real name of this virus is Iddono. This threat copies its file(s) to your hard disk. Its typical file name is Iddono. Then it creates new startup key with name Iddono and value newfolder.exe. You can also find it in your processes list with name newfolder.exe or Iddono. This virus is very difficult to eliminate manually, but you can find several possible methods of removal below.

How to fix Newfolder.exe?
Quick Solution:
True Sword will find and eliminate this problem and more than 447 908 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds.
Fast, easy, and handy, True Sword protects your computer against malicious programs that do harm to your computer and break your privacy. True Sword scans your hard disks and registry and destroys any manifestation of such malicious programs. Standard anti-virus software can do nothing against privacy breakers and malicious programs like that. Get rid of trojans, spyware, adware, trackware, dialers and keyloggers in one click .

How to fix Newfolder.exe manually? 
(For advanced users only)
This problem can be solved manually by deleting all registry keys and files connected with this software, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Iddono. To fix this threat, you should: 
1. Kill the following processes and delete the appropriate files:
  •  libedit.dll
  •  newfolder.exe
  •  shelliddono.dll
  •  srv0104.ids
  •  srvidd20.exe
If these files can't be deleted during normal Windows work or recreate themselves, reboot into Safe Mode and repeat deletion. If you do not see all of these files, then they are hiding themselves. You need special software to kill those hidden files.

 2. Delete the following malicious registry entries and\or values:
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Run for nwiz.exe Value: @
  • Key: software\microsoft\windows\currentversion\run\alchem Value: @
  • Key: software\microsoft\windows\currentversion\run\zzb Value: @
Another method which is recently discovered by me that any AVG antivirus above 8.0version can detect the new folder virus easily.

1 comment:

  1. Do you need to increase your credit score?
    Do you intend to upgrade your school grade?
    Do you want to hack your cheating spouse Email, whatsapp, Facebook, instagram or any social network?
    Do you need any information concerning any database.
    Do you need to retrieve deleted files?
    Do you need to clear your criminal records or DMV?
    Do you want to remove any site or link from any blog?
    you should contact this hacker, he is reliable and good at the hack jobs..
    contact : cybergoldenhacker at gmail dot com

    ReplyDelete