My PC has been damaged by some Trojan.
According to Symantec, the Risk is mostly Infostealer. Gampass and InfoStealer.Qphook. Some of the files are trojan files are yzztnmsn.dll, mndhgdwd.dll, kcodn32.dll, NTNSDKWOW.dll
It has disabled my 'Show Hidden Files and Folders' option. I have rectified by editing the registry. But the registry has gone back to the original faut one.
HKLM\Software\Microsoft\Wi
ndows\Curr
entVersion
\Explorer\
Advanced\F
older\Hidd
en\SHOWALL
\"CheckedV
alue"
value data is 0 (0x00000001). I Modified to 1 but the next day, I started the PC, it became 0 again.
Symantec has cleaned this many times, but it seems to keep coming back. Today, it disabled by anitvirus, ,buty luckily, I was able to reactivate it after restart.
This is the time I found out I cannot open System Restore or System
The error message are
System Restore: An exception occurred while trying to run "Shell32.dll Control_RunDLL.sysdm.cpl,,
4"
System: An exception occurred while trying to run "C:\windows\system32\shell
32.dll,Con
trol_RunDL
L"C:\Windo
ws\system3
2\sysdm.cp
l",System"
Could it be because the system restore is refective that the trojan keeps coming back?
I've tried reinstall the follow to reinstall System Restore but failed.
a) C:\Windows\inf\ - right click on sr.inf and select Install.
b) Start - Run -> rundll32.exe advpack.dll,LaunchINFSecti
on C:\Windows\Inf\sr.inf
Both failed to solve the problem.
Start Free Trial