Credits To Microsoft
How to remove Flashy Virus on your computer and USB Flash Drive
Flashy virus, also known as Troj/Glupzy-A [Sophos], W32/Glupzy-D [Sophos], is a worm type of virus that affects Windows 95 to XP systems. When the worm executes while a Flash drive is inserted, it hides all folder files on your flash drive and creates a virus type of folder with the same name as your folders. It is very irritating to remove, since it always create a new one if deleted, what's more is, it reduces your computer's performance to almost 90% and it removes the Folder Options in your Windows Explorer to prohibit access to show your hidden folders again. So here are the steps to successfully delete this virus to your computer and flash drive manually.
Step 1. Open your Task Manager window by pressing Ctrl+Alt+Delete on your keyboard.
Step 2. Go to Processes tab and look for "Flashy.exe and Systemid.pif" then end both processes by pressing the End Process button on your Task Manager window.
Step 3. Go to "Start" button -> Click "Run", and Type "regedit".
Step 4. Locate and delete the registry values:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run\"Flashy Bot" = "%System%\Flashy.exe"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Start=4
Step 5. Locate and edit the registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\"NoFolderOptions"="1"
edit "NoFolderOptions"="1" to "NoFolderOption"="0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\Advanced\"HideFileExt" ="1"
edit "HideFileExt"="1" to "HideFileExt"="0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\Advanced\"Hidden"="2"
Should be "Hidden"="2"
Step 6. Manually delete "Flashy.exe" and "Systemid.pif".
flashy.exe is in C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
systemid.pif is in C:\Documents and Settings\[Current User]\Start Menu\Programs\Startup
Step 7. Delete the folder "Flashy" and all of your folders on your Flash Drive, dont worry, its not your actual folders, your real folders are just hidden by this virus.
Step 8. Restart your computer and open the Folder Options on your windows explorer and click "Show hidden files and folders". You can now see your folders that once made hidden by the virus. Congratulations! Your computer and Flash Drive is now free form the Flashy virus.
Why is my Task Manager disabled, and how do I fix it?
My task manager has a "task manager has been disabled by the administrator" message. How did this happen and how can I correct this?
Why: if you didn't do it yourself, the news isn't good.
How to fix it: there are a couple of ways.
Let's look at this more closely.
The situation's pretty simple. If you right click on the clock in the Windows taskbar, the Task Manager item is grayed out:
Or, if you try to run taskmgr.exe manually, you get this message:
So, how did this happen?
As we'll see in a moment, there are settings you can access as an administrator that would allow you to disable and enable Task Manager in this way.
You didn't do that, you say?
Then a virus probably did.
Disabling Task Manager is one way viruses try to make it harder for you to deal with their infections. Before proceeding any further, you should run a complete and up-to-date anti-virus scan of your machine. It's possible, perhaps even likely, that you've been infected.
Once you come back virus-free, you can proceed with the fix.
If you have Windows XP Pro, there's a nifty user interface to directly edit the setting you want to repair. Click Start, then click Run and type in gpedit.msc:
And press OK. This runs the Group Policy Editor.
Once in the Group Policy Editor, expand in turn:
User Configuration
Administrative Templates
System
Ctrl+Alt+Del Options
You should see something much like this:
Double click on Remove Task Manager to change its setting:
It should be enough to click on Not Configured and then OK and Task Manager is available once again.
If you don't have Windows XP Pro, then you'll need to edit the registry manually.
Click Start, then click Run, type in regedit, and click on OK.
Expand these registry keys in turn:
• HKEY_CURRENT_USER
• Software
• Microsoft
• Windows
• CurrentVersion
• Policies
• System
You should see something similar to this:
Right Click on the DisableTaskMgr item:
Click on Delete, confirm that you want to delete, and Task Manager should be available once again.
How to remove Flashy Virus on your computer and USB Flash Drive
Flashy virus, also known as Troj/Glupzy-A [Sophos], W32/Glupzy-D [Sophos], is a worm type of virus that affects Windows 95 to XP systems. When the worm executes while a Flash drive is inserted, it hides all folder files on your flash drive and creates a virus type of folder with the same name as your folders. It is very irritating to remove, since it always create a new one if deleted, what's more is, it reduces your computer's performance to almost 90% and it removes the Folder Options in your Windows Explorer to prohibit access to show your hidden folders again. So here are the steps to successfully delete this virus to your computer and flash drive manually.
Step 1. Open your Task Manager window by pressing Ctrl+Alt+Delete on your keyboard.
Step 2. Go to Processes tab and look for "Flashy.exe and Systemid.pif" then end both processes by pressing the End Process button on your Task Manager window.
Step 3. Go to "Start" button -> Click "Run", and Type "regedit".
Step 4. Locate and delete the registry values:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run\"Flashy Bot" = "%System%\Flashy.exe"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Start=4
Step 5. Locate and edit the registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\"NoFolderOptions"="1"
edit "NoFolderOptions"="1" to "NoFolderOption"="0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\Advanced\"HideFileExt" ="1"
edit "HideFileExt"="1" to "HideFileExt"="0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\Advanced\"Hidden"="2"
Should be "Hidden"="2"
Step 6. Manually delete "Flashy.exe" and "Systemid.pif".
flashy.exe is in C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
systemid.pif is in C:\Documents and Settings\[Current User]\Start Menu\Programs\Startup
Step 7. Delete the folder "Flashy" and all of your folders on your Flash Drive, dont worry, its not your actual folders, your real folders are just hidden by this virus.
Step 8. Restart your computer and open the Folder Options on your windows explorer and click "Show hidden files and folders". You can now see your folders that once made hidden by the virus. Congratulations! Your computer and Flash Drive is now free form the Flashy virus.
Why is my Task Manager disabled, and how do I fix it?
My task manager has a "task manager has been disabled by the administrator" message. How did this happen and how can I correct this?
Why: if you didn't do it yourself, the news isn't good.
How to fix it: there are a couple of ways.
Let's look at this more closely.
The situation's pretty simple. If you right click on the clock in the Windows taskbar, the Task Manager item is grayed out:
Or, if you try to run taskmgr.exe manually, you get this message:
So, how did this happen?
As we'll see in a moment, there are settings you can access as an administrator that would allow you to disable and enable Task Manager in this way.
You didn't do that, you say?
Then a virus probably did.
Disabling Task Manager is one way viruses try to make it harder for you to deal with their infections. Before proceeding any further, you should run a complete and up-to-date anti-virus scan of your machine. It's possible, perhaps even likely, that you've been infected.
Once you come back virus-free, you can proceed with the fix.
If you have Windows XP Pro, there's a nifty user interface to directly edit the setting you want to repair. Click Start, then click Run and type in gpedit.msc:
And press OK. This runs the Group Policy Editor.
Once in the Group Policy Editor, expand in turn:
User Configuration
Administrative Templates
System
Ctrl+Alt+Del Options
You should see something much like this:
Double click on Remove Task Manager to change its setting:
It should be enough to click on Not Configured and then OK and Task Manager is available once again.
If you don't have Windows XP Pro, then you'll need to edit the registry manually.
Click Start, then click Run, type in regedit, and click on OK.
Expand these registry keys in turn:
• HKEY_CURRENT_USER
• Software
• Microsoft
• Windows
• CurrentVersion
• Policies
• System
You should see something similar to this:
Right Click on the DisableTaskMgr item:
Click on Delete, confirm that you want to delete, and Task Manager should be available once again.
0 comments:
Post a Comment