Welcome To Paki Tigers Community


 
HomeFAQSearchMemberlistUsergroupsRegisterLog in

Share | 
 

 HOW TO Remove NTDETEC1.exe !!

Go down 
AuthorMessage
Admin
Admin


Posts : 102
Join date : 2008-09-25
Age : 28
Location : Pakistan

PostSubject: HOW TO Remove NTDETEC1.exe !!   Sat Oct 04, 2008 8:19 am

In this tutorial i will tell you how to remove the Ntdetec1.exe


If you’re using the Operating System called Windows, chances are that you might have already come across the ntdetec1.exe virus. Or you will, sooner or later.

Its official name is W32.Ceted and it is a worm that copies itself to all shared and removable drives and spreads when the user double clicks on it to open it. If a system is infected, it creates a folder called ntdetec1 in your System Drive which is NOT visible via Explorer or Command prompt.

Related files:
\ntdetec1\ntdetec1.exe
\ntdetec1\cmrss.exe
\ntdetec1\run.exe
\ntdetec1\shell32.exe
\ntdetec1\drivelist.txt
\ntdetec1\child\autorun.inf
\ntdetec1\child\ntdetec1.exe

Symptoms:
1. Task Manager closes as soon as it launches.
2. RegEdit may be inaccesible
3. Folder Options may be inaccessible

When I scanned using some anti-virus software, Nod32, Symantec AV Corporate, McAfee and AVG failed to detect the files, even in Safe Mode.

To remove it, run the following commands at the command prompt:

taskkill /im cmrss.exe
taskkill /im ntdetec1.exe
taskkill /im shell32.exe

Now, make sure you are in the root drive of your system. For example, if your Windows in installed in C:, make sure your prompt shows C:\>
Now, run the command..

attrib ntdetec1 -s -h -r /s /d
(s->system,h->hidden,r->read only)

This will make the folder visible in explorer. Now you can Shift+Delete the folder from explorer.

Also, you might need to delete the following registry key (if it is present)

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\policies\Explorer\ Run\"winlogon" = "C:\ntdetec1\run.exe"

Congratulations, this will remove all known traces of the above worm.
And remember, next time you use someone’s PD, before you access it, goto your command prompt and delete the autorun.inf file if any
Back to top Go down
View user profile http://paki-tigers.forumotion.com
 
HOW TO Remove NTDETEC1.exe !!
Back to top 
Page 1 of 1
 Similar topics
-
» [IMPLEMENTED] Remove Onedrive - Windows 10 TP 10041
» Remove Restricted Sites From Internet Explorer 8
» WebArtz Newsletter Vol. 18
» Temporary FireFox Profile using Selenium WebDriver
» Removing HOME in Footer - phpbb3

Permissions in this forum:You cannot reply to topics in this forum
Welcome To Paki Tigers Community :: Tutorials :: Viruses-
Jump to: