Cannot open disk by double click.Virut?
- Thread starter daykoname
- Start date
Crimsonite
New Member
fun.xls.exe is a variant of tel.xls.exe, it is a nasty little virus that prevents you from double-clicking on any file and disable your rights to view any hidden files. It then goes on injecting its own hidden files/documents into your drive root and begins spreading through your network. So far, I don't think there's any Anti-Virus that can successfully remove this virus, you'll need to do this manually. Please follow the below instructions carefully:
1)Open your TaskManager and kill these processes by right-clicking on the process name and choose "End Process Tree":
C:\WINDOWS\system32\algsrvs.exe
C:\WINDOWS\system32\msfun80.exe
C:\WINDOWS\system32\msime82.exe
C:\WINDOWS\ufdata2000.log
Also, if fun.xls.exe is running as well, kill it too.
2)Control Panel -> Folder Options -> View -> check Show hidden files and folders, then uncheck "Hide known protected system files" and "Hide known file extensions".
3)Open your C:\ drive root, and delete these files:
AUTORUN.INF
fun.xls.exe
Do a search on these two files, as they may have several copies throughout your entire hard disk, then delete each of them manually. Now reboot into Safe Mode.
4)Check TaskManager again to see if any of its processes are running again. If so, repeat step 1 to kill them. Now delete these files:
C:\Documents and Settings\Your User Account Name\Local Settings\Temp\~DFA4C3.tmp
C:\Documents and Settings\Your User Account Name\Local Settings\Temp\~DFC86B.tmp
C:\WINDOWS\system32\algsrvs.exe
C:\WINDOWS\system32\msfun80.exe
C:\WINDOWS\system32\msime82.exe
C:\WINDOWS\ufdata2000.log
5)Download HiJackThis v1.99.1 to your C:\ Drive root, then rename it to a less common phrase such as DAY.exe, then run a scan & save log. Please copy & paste your log in your reply post.
1)Open your TaskManager and kill these processes by right-clicking on the process name and choose "End Process Tree":
C:\WINDOWS\system32\algsrvs.exe
C:\WINDOWS\system32\msfun80.exe
C:\WINDOWS\system32\msime82.exe
C:\WINDOWS\ufdata2000.log
Also, if fun.xls.exe is running as well, kill it too.
2)Control Panel -> Folder Options -> View -> check Show hidden files and folders, then uncheck "Hide known protected system files" and "Hide known file extensions".
3)Open your C:\ drive root, and delete these files:
AUTORUN.INF
fun.xls.exe
Do a search on these two files, as they may have several copies throughout your entire hard disk, then delete each of them manually. Now reboot into Safe Mode.
4)Check TaskManager again to see if any of its processes are running again. If so, repeat step 1 to kill them. Now delete these files:
C:\Documents and Settings\Your User Account Name\Local Settings\Temp\~DFA4C3.tmp
C:\Documents and Settings\Your User Account Name\Local Settings\Temp\~DFC86B.tmp
C:\WINDOWS\system32\algsrvs.exe
C:\WINDOWS\system32\msfun80.exe
C:\WINDOWS\system32\msime82.exe
C:\WINDOWS\ufdata2000.log
5)Download HiJackThis v1.99.1 to your C:\ Drive root, then rename it to a less common phrase such as DAY.exe, then run a scan & save log. Please copy & paste your log in your reply post.
Thank you . I just found 1 antivirus program can kill this virut . You can download here :
Paid and Free :
http://www.bkav.com.vn/home/Download.aspx
Now i can doulble click normally
Paid and Free :
http://www.bkav.com.vn/home/Download.aspx
Now i can doulble click normally