tag:blogger.com,1999:blog-2091151685457159297.post2053817098714907278..comments2010-12-29T12:44:01.687-05:00no.good.at.codinghttp://www.blogger.com/profile/04460714365540022556noreply@blogger.comBlogger6125tag:blogger.com,1999:blog-2091151685457159297.post-36327059654687943062010-12-29T12:44:01.687-05:002010-12-29T12:44:01.687-05:00its so useful artical.its so educational tutorial.daminihttp://www.learntohack.webnode.comnoreply@blogger.comtag:blogger.com,1999:blog-2091151685457159297.post-35812470581900989992009-03-02T07:28:00.000-05:002009-03-02T07:28:00.000-05:00I also had the same problem. i solved it first by stopping it from start through ccleaner.then i deleted enteries in safe mode of it fromm system32. It was having name advirs.exe.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2091151685457159297.post-13355281957283979392008-10-10T07:33:00.000-04:002008-10-10T07:33:00.000-04:00Please see the URL below <BR><BR/><A HREF="http://forums.webexcelsolutions.com/forum_posts.asp?TID=338" REL="nofollow">http://forums.webexcelsolutions.com/forum_posts.asp?TID=338</A><BR><BR>This URL helped me out. I was not able to even open my drives, it was giving me "Administrator has blocked this operation" errorAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-2091151685457159297.post-14170523315188697592008-10-10T07:27:00.000-04:002008-10-10T07:27:00.000-04:00This comment has been removed by the author.Ravindrahttp://www.blogger.com/profile/18360894247074394746noreply@blogger.comtag:blogger.com,1999:blog-2091151685457159297.post-64743108675550416542008-09-14T10:11:00.000-04:002008-09-14T10:11:00.000-04:00I took a relatively simpler route of deleting advirs.exe. Rebooted the computer in "Safe Mode with Networking" ( for WinXP). Deleted the virus from system32 folder. Then deleted the advirs entries from registry. Also deleted the virus from USB drive in the safe mode only. Luckily all this worked for me. All the best to you. <BR/>Cheers,<BR/>MohitAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-2091151685457159297.post-25879110587071390232008-05-28T07:05:00.000-04:002008-05-28T07:05:00.000-04:00If I'm not mistaken, there is this virus, that runs a process NTDETECT.exe that does the same things as this virus. (I have a copy of it with me, if u'd like to check it out on a VM or something) May be this one's just a mutated version ;) That has to be deleted the same way. And most antiviruses (free editions or enterprise ones) are useless. They detect malware only when it's way too late. And then they simply delete the virus without undoing the changes brought about by them. IMO the best way to protect your Windows would be to use a decent registry guard. Although it can be irritating at times, it is lightweight n practical.Wolfestinehttp://www.blogger.com/profile/02334088787734723200noreply@blogger.com