41 Responses for "regsvr.exe"

1. Shinoy April 29th, 2008 at 6:36 pm 1

   How to remove new folder exe or regsvr exe or autorun inf virus

2. Sachin May 15th, 2008 at 6:58 am 2

   This virus is know popularly as regsvr.exe virus, or as new folder.exe virus and most people identify this one by seeing autorun.inf file on their pen drives, But trend micro identified it as WORM_DELF.FKZ. It is spreading mostly using this pen drives as the medium.

   So let’s start the process off reclaiming the turf that virus took over from us.
   1. Cut The Supply Line
   a. Search for autorun.inf file. It is a read only file so you will have to change it to normal by right clicking the file , selecting the properties and un-check the read only option
   b. Open the file in notepad and delete everything and save the file.
   c. Now change the file status back to read only mode so that the virus could not get access again.
   d.
   e. Click start->run and type msconfig and click ok
   f. Go to startup tab look for regsvr and uncheck the option click OK.
   g. Click on Exit without Restart, cause there are still few things we need to do before we can restart the PC.
   h. Now go to control panel -> scheduled tasks, and delete the At1 task listed their.
   2. Open The Gates Of Castle
   a. Click on start -> run and type gpedit.msc and click Ok.
   b.
   c. If you are Windows XP Home Edition user you might not have gpedit.msc in that case download and install it from Windows XP Home Edition: gpedit.msc and then follow these steps.

   d. Go to users configuration->Administrative templates->system
   e. Find “prevent access to registry editing tools” and change the option to disable.
   f.
   g. Once you do this you have registry access back.
   3. Launch The Attack At Heart Of Castle
   a. Click on start->run and type regedit and click ok
   b. Go to edit->find and start the search for regsvr.exe,
   c.
   d. Delete all the occurrence of regsvr.exe; remember to take a backup before deleting. KEEP IN MIND regsvr32.exe is not to be deleted. Delete regsvr.exe occurrences only.
   e. At one ore two places you will find it after explorer.exe in theses cases only delete the regsvr.exe part and not the whole part. E.g. Shell = “Explorer.exe regsvr.exe” the just delete the regsvr.exe and leave the explorer.exe
   4. Seek And Destroy the enemy soldiers, no one should be left behind
   a. Click on start->search->for files and folders.
   b. Their click all files and folders
   c. Type “*.exe” as filename to search for
   d. Click on ‘when was it modified ‘ option and select the specify date option
   e. Type from date as 1/31/2008 and also type To date as 1/31/2008
   f.
   g. Now hit search and wait for all the exe’s to show up.
   h. Once search is over select all the exe files and shift+delete the files, caution must be taken so that you don’t delete the legitimate exe file that you have installed on 31st January.
   i. Also selecting lot of files together might make your computer unresponsive so delete them in small bunches.
   j. Also find and delete regsvr.exe, svchost .exe( notice an extra space between the svchost and .exe)
   5. Time For Celebrations
   1. Now do a cold reboot (ie press the reboot button instead) and you are done.
   I hope this information helps you win your own battle against this virus. Soon all antivirus programs will be able to automatically detect and clean this virus. Also i hope Avast finds a way to solve this issues.
   As a side note i have found a little back dog( winpatrol ) that used to work perfectly on my old system. It was not their in my new PC, I have installed it again , as I want to stay ahead by forever closing the supply line of these virus. You can download it form Winpatrol website.
   UPDATE : Avast Boot Time Scheduling

   Check out How to stop regedit, task manager and msconfig from closing automatically if your regedit or msconfig closes automatically.

3. tajudeen May 15th, 2008 at 11:02 am 3

   How to remove new folder exe or regsvr exe or autorun inf virus

4. Kedar Dingankar May 27th, 2008 at 4:39 am 4

   Thanks.
   This is a very good solution.
   I am able to remove the viruses using this.

   Thanks to u again.

5. Abhay Deshpande June 12th, 2008 at 6:42 am 5

   Thanks. It helped. Thanks for your time and giving detailed solution, step by step.

6. Nilesh June 24th, 2008 at 11:29 am 6

   Thanks

   i removed this virus from my system.
   now my pc is fast

   thanks

7. utkarsh July 4th, 2008 at 8:16 am 7

   i am unable to remove that spyware through all these process

8. utkarsh July 4th, 2008 at 8:19 am 8

   i m unable to delete the regsvr.exe spyware.
   to remove that i had applied all the given processes.
   but no one help me to remove that spyware
   please help me to remove that spyware

9. gowda July 9th, 2008 at 5:12 pm 9

   thank you for the detailed and simple solution. My system is fast.

10. abhishek July 29th, 2008 at 6:07 pm 10

    thnx man …..viruses freak me out …this 2 was
    thnx again

11. sandanuwan August 11th, 2008 at 2:29 am 11

    there is no autorun.inf file so i cant use the above method. are there any methods

12. Prabhakar August 13th, 2008 at 10:06 am 12

    Sorry! the said procedures are not helped to delete the regsvr.exe from my PC

13. sudhanshu August 23rd, 2008 at 12:14 am 13

    @sachin……..
    thanks …..that’s exactly what i was looking for….

14. sripaul August 23rd, 2008 at 1:55 pm 14

    any one plz say how to remove REGSVR.EXE

15. Sanjay September 4th, 2008 at 2:07 am 15

    Try Norman Malware Cleaner

16. seenu September 5th, 2008 at 12:51 am 16

    good but I could not understand any easy method or any tool? help

17. vikku September 12th, 2008 at 7:15 am 17

    Good method..although my autorun file has been permanently deleted by another windows fixing software…i did all the other methods and removed the virus…

    I have one more observation..the virus got inter related with my nod32 support file “ekrn.exe” ..i had to delete that too…now im terrified to instal nod32 bcoz i think the problem will come back.

18. Dheeraj September 20th, 2008 at 5:28 pm 18

    I had applied the same method but unable to remove regsvr.exe/ new folder.exe from my PC.

19. Dheeraj September 20th, 2008 at 5:30 pm 19

    Please tell me what i have to do now.

20. rajeev pk September 29th, 2008 at 6:07 pm 20

    thankuuuu very much sachin

21. sripada October 3rd, 2008 at 6:08 am 21

    Thanks for the tips.I did as per the instructions itself.But still unable to remove the regsvr.exe.
    when ever i start the pc i can see that the process regsvr.exe takes 100% of cpu every time.
    Can u suggest me how to completely get rid of this problem please…

22. Prafull October 8th, 2008 at 8:14 am 22

    can u tell me were is autorun.inf file is located(path as per ur windows).I tried 2 search 4 dat file in windows bt after search it cud not find in windows folder. I was usin advance search options(checkin system files nd hidden files)

23. shemaju October 9th, 2008 at 6:59 am 23

    how can i remove regsvr.exe
    please help me
    now my cpu working 50% and above
    i am using norton 2007 antivirus
    but i cant remove newfolder.exe

24. mahesh October 17th, 2008 at 1:38 am 24

    tell me how can i fix my problem, which is with regsvr.exe

25. Anish Kumar November 19th, 2008 at 6:18 am 25

    Hi,I found the same in my laptop.There is one more problem that,all my pictures properties are gone to hidden and now i am not able to re-set it by doing tools->folder options->view->show hidden files.

    Anybody can help me Pls..?

26. Anish Kumar November 19th, 2008 at 6:18 am 26

    Hi,I found the same(regsvr.exe) in my laptop.There is one more problem that,all my pictures properties are gone to hidden and now i am not able to re-set it by doing tools->folder options->view->show hidden files.

    Anybody can help me Pls..?

27. MAX November 20th, 2008 at 3:40 pm 27

    Best Way is intalled mcAffe8.0i Antivirus and Update it will clear all virus 90% As a Enginnerr

28. kalai December 19th, 2008 at 5:50 am 28

    Thanks

29. Shailendra verma January 24th, 2009 at 3:44 am 29

    Thanks sachin.The procedure worked correctly.But I m not able to detect autorun.inf . Also the date you specified for seach *.exe is between 1/31/2008 to 1/31/2008. But today is 1/24/2009 , should I replace 1/31/2008 by 1/24/2009?

30. yuvi February 13th, 2009 at 2:15 pm 30

    thanks

31. vinod February 28th, 2009 at 8:48 pm 31

    Thanks for the help…I tried as per the instructions ..But still unable to remove the regsvr.exe.
    when ever i start the pc i can see that the process regsvr.exe appear two times…so plz help me to get out of it finally.

32. uppendrasahu_208@yahoo.com March 18th, 2009 at 3:44 am 32

    any one knows how to remove newfolder .exe from pc such that it made new folder inside foldername

33. dhiraj.parswani March 18th, 2009 at 9:15 am 33

    i found a new solution for this bastard regsvr,exe virus which eats up to 70 % of your cpu ussage,i searched the file renamed it to something else..than opend that in a notepad all the crap which opened up was the code how the virus works i backspaced it and saved it again.restated the system its fine…but this cant be permanent fix,the best fix is to reinstall windows

34. shobha March 24th, 2009 at 12:47 pm 34

    I see the same error related to regsvr.exe on the startup of my machine. I have tried all the steps that sachin mentioned but failed to remove regsvr.exe issue. Pls reply me urgently so as to get rid of this for ever. I see the msgbox “Windows cannot find regsvr.exe. Make sure you typed the name correctly, and then try again. To search a file, click the Start button, and then click Search” while the startup of the PC. Please help. urgently

35. moosa April 14th, 2009 at 12:42 pm 35

    where is autorun.inf for virus regsvr
    reply quick

36. asdfasdf April 15th, 2009 at 2:43 pm 36

    cant find autorun.inf for virus too. got 9 results, cant tell which one

37. prashant May 4th, 2009 at 5:06 pm 37

    YOU ROCK MAN

38. fazal rajput May 6th, 2009 at 4:11 pm 38

    i want to remove regsve.exe from my pc thanks

39. rahul naik July 7th, 2009 at 7:41 am 39

    my regsver.exe virus doesnt removed.

40. chaitu July 15th, 2009 at 11:58 am 40

    sorry to tell you this pal
    but the procedure u have explained might not work on all systems affected by this virus as regsvr.exe will disable the registry also. so you cannot remove it from registry.. and also once u open the autorun.inf file and try to save it back again it will accept any changes….

41. harish November 14th, 2009 at 6:47 am 41

    The procedure solves issue to an extent.

    It only disable the regsvr virus but kill all the related registry stting. If you open you Regedit in the startup option, you will still see the Regsvr option which can be enabled or disbaled….Any way to remove it from here??

    harry_g1979@rediffmail.com