http://piyushlabs.wordpress.

com/

Downloads
Here are links to some great softwares (that i have created)..

HealAntiVirus
fixes many important registries and delete “autorun.inf” form all drives, pen drives as
well
so be tension-free to double click the pen drives
realtime scanning
http://piyushlabs.googlepages.com/HealAntiVirus1.31.exe (new)

Remove viruses from Pen-Drive

http://piyushlabs.googlepages.com/healpendrive_1.0.exe (new)

Download my Crackers
Folder Lock Password Crack:
http://piyushlabs.googlepages.com/FolderLockPWCrackerFullVersion.zip
P C Security Password Crack:
http://piyushlabs.googlepages.com/PCSecurityPWCrackerFullVersion.zip

Download AntiDote by Murtuza Zhabuawala

It enables Folder Options, Task Manager, Regedit, Run.
Spots startup programs and check real time protection of ur antivirus.

http://piyushlabs.googlepages.com/antidote.zip

Download my HEALS
Heal for SSVICHOSST virus:
http://piyushlabs.googlepages.com/Heal-SSVICHOSST.zip

Heal for Hacked by Godzilla virus :

http://piyushlabs.googlepages.com/Heal-godzilla.zip

Heal for MicrosoftPowerpoint.exe virus / Orkut virus :

http://piyushlabs.googlepages.com/Heal-Microsoftpowerpoint.zip

Heal for ntde1ect.com virus / avpo.exe virus:

http://piyushlabs.googlepages.com/Heal-ntde1ect.com-101.zip
Heal for nhatquanglan virus / SCVHSOT.exe / blastclnnn.exe :
http://piyushlabs.googlepages.com/Heal-nhatquanglan-104.zip

Heal for mahsa virus / New Folder.exe :

http://piyushlabs.googlepages.com/Heal-Mahsa-NewFolder-102.zip

Heal for regsvr.exe virus

http://piyushlabs.googlepages.com/Heal_regsvr1.0.zip

Heal for Funny UST Scandal.exe / smss.exe / killer.exe (batch files)

http://piyushlabs.googlepages.com/1.bat
http://piyushlabs.googlepages.com/2.bat

These programs are witten in C/C++ and AutoIt v3. The size of these tools are in KBs. A
specific program for a specific virus, removes that virus as well as heals your system (re
gistries) from damage caused by the virus… The programs were created on WinXP
considering Windows installed on C drive. If the programs do not run or shows un-
natural behavior then please contact me. When asked to press ‘Y’ to continue, use capital
letter ‘Y’.

it makes your system free from that virus unless you install them again : ) . . .

143 Comments Add your own

• 1. Softwares (HEALS) uploade… | 17 October, 2007 at 5:14 pm

[...] http://piyushlabs.wordpress.com/downloads/ [...]

• 2. Criss | 20 October, 2007 at 11:21 am

Your anti SSVICHOSST heal dint work is there any other thing i missed or some
other way to drive away the virus???????

• 3. Criss | 20 October, 2007 at 11:21 am

it always opens when my windows boot

• 4. pramit doshi | 21 October, 2007 at 10:47 am

hi it was beautifully mentioned by u that how to get rid of SSVICHOSST.zip. but

i have one more virus called SOHANAND.az. i have removed it but how to get
 RUN command back. with out run command all your instruction is of no use.
thank you.

• 5. Shelwyn corte | 22 October, 2007 at 12:34 pm

Man Thanks a Million

• 6. piyushlabs | 22 October, 2007 at 4:18 pm

criss,
if it didn’t work then follow the steps by step procedure at
http://piyushlabs.wordpress.com/ssvichosst

if u get only the start up error , e.g. “Windows cannot find ssvichosst” or “error
loading SSVICHOSST”
then perform the small procedure at…
Fix for ” Windows cannot find ssvichosst” on
http://piyushlabs.wordpress.com/ssvichosst

The anti-viruses can delete the virus files but they do not repair the registries….
gud luck…

• 7. piyushlabs | 22 October, 2007 at 4:25 pm

hi pramit doshi
i think its SOHANAD, ( rather SOHANAND )

if u have that virus can you please upload it somewhere from where i can get it. i
luv to experiment …

to enable RUN…
Open regedit, goto
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\
HKCM\Software\Microsoft\Windows\CurrentVersion\Policies\

some where inside u will find something like “DisableRun”.. delete that key… or
value it 0
thats all..

• 8. Mithun | 30 October, 2007 at 5:03 pm

 Thanks mate.
You are the champ.
As - “The anti-viruses can delete the virus files but they do not repair the
registries….”

Please advise how to repair my registry..

• 9. piyushlabs | 30 October, 2007 at 6:05 pm

mithun,
dude it simply depends whats the problem u are facing.
if u have then tell me…
the common problem that one can find are alredy listed on my other pages.

i request, plz dont play with the registries if u dont know.

• 10. PRAVEEN SAMALA | 9 November, 2007 at 8:50 pm

heelo piyushlabs staff you are working for the world people how are facing
problems by viruses. i am thanking you for that. but i have a small problem with
my computer has attaked virus named ssvichosst.exe and i have tryed your
prosidures but the problem is still there please help us to slove this problem. and
the virus is entered in my pendrive last night now i am not able to use my
pendrive in any other computers if i am opeing my pen drive there computer also
effcted by this virus so please help us how to delete this files from pendrive. i
have tryed format but it is still there

• 11. piyushlabs | 9 November, 2007 at 9:15 pm

PRAVEEN
what r the problems u r facing.
1> can u open task manager,etc?
try the step-ny-step procedure again, or d’load the heal.
if u use a lappy, then copy the taskkill.exe file into ur windows/system32 folder n
then run the program.
2> if u can see the virus file send me the complete detail of the file, its
size,verison,etc
3> at what step u r unable to fix the problem…?

* To acccess pen drives on other comps, in the menu bar goto

view>explorerbar>folder and then click only on tree that appears on the left.
Never double click the pendrives.
• 12. sukanya | 10 November, 2007 at 1:07 pm

i have problem in pc.

**************i get windows installer very often when i start up the pc.*******
just i healed up the ssvihosst.exe virus.and i got back the registry setup frm the
above procedures.

pls resolve the above problem

• 13. ALOK KASHIMATH | 11 November, 2007 at 10:20 am

dude what the c++ pro gramme u have written for the folder lock to decode the
first two letters of the password so that the user might get it but if he does ‘nt
come to know the password then what, so i tell u the new way itz what i do every
time i forget the password
1st one — always when u r logging inside the folder lock software u might
mistype the password eg: if the password is nature u might in a hurry may type
naturt the movement u type a wromg pass the wrong passwods are logged by the
windows in the registry of the folder lock logs u might check itz a very simple
way to get back the password , But remember 1 thing the mistyped password will
be in the reverse order like this trutan so guess every thing is easy in world the
path which u have to follow is first got
>> run >>type regedit>> my
computer\hkey_local_machine\software\folderlock\logs

2nd one is the most common way to unistall the folder lock without the password
is while windows boots press f5 initally & boot windows with a safe mode go to
the path where folder lock is installed press shft+del then in add or remove
programes to uninstall clear the registory

alok kashimath [ sirmvit bangalore ]

• 14. piyushlabs | 11 November, 2007 at 1:28 pm

SUKANYA
open msconfig n check the startup items. uncheck the unwanted registries. have u
installed some s/w recently ?

• 15. piyushlabs | 11 November, 2007 at 1:35 pm

ALOK KASHIMATH,
u have done so much of research on registries : )
so u sud be able to find out where the “exact password” is saved in registry.. if u
 find out that, u can get the password, which is very simply encrypted.
i dont want to upload the complete pw tool, otherwise what will be the purpose of
such softwares, like FolderLock n PCSecurity.

ok dude if u want then , soon i’ll upload the complete programs.. : )

• 16. ALOK KASHIMATH | 11 November, 2007 at 5:59 pm

DO WRITE THE PROGRAMS REALLY OR JUST COPY FROM THE NET &
UPLOAD IT BECAUSE I AM REALLY INTRESTED IN TO CREATIVITY OF
THE PROGRAMS & SOME SMALL PROGRAMS I HAVE CREATED SOME
MAY THEY R IN STILL DEVELOPING I CAME TO KNOW U R A MECH
GUY BUT U SEEM TO BE INTREASTED IN THIS FIELD

• 17. piyushlabs | 12 November, 2007 at 6:09 pm

dude, i write simple programs most of then involving registries, myself : )

i’d like to hear about ur programs man…

• 18. kavya | 14 November, 2007 at 1:21 pm

hey man…thanx a lot…..da whole problems solved!!…thanx a million…

• 19. Rajesh | 4 December, 2007 at 8:48 pm

Dude, the softwares u hav written r relly cool.. Ur SSVICHOST removal program
did wonders for me.. :). Thanks a ton mate.. Really inspired by what u have done,
Any advice on improving prog skills??..

• 20. Rakshit Desai | 7 December, 2007 at 8:05 am

Hey thanks for the SSVICHOST fix ….

• 21. Vaibhav Sharma | 7 December, 2007 at 5:39 pm

Hey piyush I downloaded the SSVICHOSST heal from your download page. But
still it is not able to remove the virus from my system. Please suggest me
something dude… Thanks in advance

• 22. piyushlabs | 7 December, 2007 at 10:04 pm

 RAJESH
m not so good at programming dude. No comments.. : )

VAIBHAV
if u have ssvichosst virus, it will surely go. you may have any other virus. What
are the problems u are facing?
open msconfig and check the startup items..
Try rebooting comp in “safe mode with command priompt” and enter the manual
command in CMD prompt as described in SSVICHOSST page…
Try the solution for other common viruses also…

• 23. piyushlabs | 7 December, 2007 at 10:15 pm

RAJESH
dude, i am not sooo good at programming… ; )
even u can do, just u gottta learn about handling registries using C/C++. You
should search and find it urself on net, hmmm… dats a bit tedious. Coz i didn’t
find any tutorial, just a few examples.

• 24. ali | 8 December, 2007 at 7:00 am

thank you so much!

• 25. hydhar | 8 December, 2007 at 9:21 pm

piz

• 26. Muhammad Imran From Pakistan | 8 December, 2007 at 10:21 pm

Thank u very much for these software

thanks again

• 27. sivam | 12 December, 2007 at 9:32 pm

thanx a lot buddy..its really useful

• 28. Richard | 14 December, 2007 at 2:30 am

SSVICHOSST & ntde1ect viruses cleaned out.

Many thanks.
• 29. kadam | 15 December, 2007 at 6:51 pm

hi piyush
how to use the heal.
there r 3 exe files in zip folder
pls explain
kadam

• 30. aizaz | 15 December, 2007 at 8:41 pm

thx a ton man but thrs still a problem

the nhatquanglan virus is gone everythings normal but my memory card was
affected n wenevr i open it it has that folder too in it n same thing happns wen i
try 2 fiddle wit it

• 31. piyushlabs | 16 December, 2007 at 3:38 pm

KADAM
1 file is “taskkill.exe” copy it to C:\
2nd one is short-cut to end task the virus program.
3rd file is the main program/heal file.
Everything is mentiond inside the main program.

• 32. piyushlabs | 16 December, 2007 at 3:47 pm

AIZAZ
probably ur comp is getting affected from ur mamory card, whenever u use it.
To remove virus from removable drives: :
1. First run my heal program, or follow the manual steps.
2. Make sure u can see all the hidden files, n system files. (eg. ntldr, ntdetect in
C:\)
3. If not, Open MyComputer goto Tools>Folder options>Views ,
Select “show hidden files/folders”
Uncheck “Hide protected system files”
4. Insert ur removable media,
5. Open MyComputer.
6. NEVER DOUBLE CLICK UR PEN DRIVE
7. GotoView>ExplorerBar>Folders
8. You will see a tree structure on left hand side.
9. Single click on PenDrive, in the LHS tree view, to open the pen drive.
10. Open “Autorun.inf” file in notepad n check its contents. This file auto-
launches the virus when ever u double-click the drive.
11. Delete the autorun.inf and the other virus files….
• 33. deepak singh rana | 17 December, 2007 at 12:51 pm

heelllpppp mmeee plzzzzzzzzzzzzz i know my computer has a virus. but im not

able to do any thing , all the data in my two drives is just completely invisible ,in
property it shows data size bt it is hidden , folder option does nt help . plz help m
out.thankyou.

• 34. davinder | 17 December, 2007 at 5:04 pm

ihave funny ust scandel virus in my pc pls tell the right removel tool

• 35. BALAJI | 18 December, 2007 at 9:53 am

thank u for the instruction i hav removed the virus in harddisk but in pendrive i
can’t identify any file so, using folder option i am not underlook any file.so,
please send solution with step by step process to remove the virus

• 36. Matt | 19 December, 2007 at 3:55 am

By the way, it’s me again, I call the virus ZillaHardDriveKiller

• 37. piyushlabs | 20 December, 2007 at 4:18 pm

DEEPAK
it happens due to some virus, which changes the attributes of all folders to
hidden/system.
and corrupts the registries, so that u cant see the hidden files.

this registry should fix it here http://piyushlabs.googlepages.com/reg_ntde1ect.reg

(if it doesnt work, then reply back)
now goto folder option and select “show hidden files” and uncheck “hide
protected files”

open msconfig and check if u have the virus in ur startups.. or else this will
happen again.

DAVINDER
better follow the manual steps,
u will learn…

BALAJI
try the merging the registry,
 http://piyushlabs.googlepages.com/reg_ntde1ect.reg
Never double click the pendrives.

MATT
sorry dude, i cant do anything to the hard drive killer, coz i have little knowledge
about such programs which damages the HDD and RAM…

• 38. satish | 26 December, 2007 at 8:44 am

how to remove the funny scandal.avi.exe and autorun.inf in pendrives without

formatting plzz give me the solution. it’s urgent

• 39. Arun N. | 27 December, 2007 at 3:16 am

Hi Piyush,

Im using P4 system with 126 RAM, WindowsXP, 40Gb HDD. Recently I have
noticed that my system is getting slow in the process. Please suggest me a
solution for this. I was very much impressed with your solutions particularly the
Nhatquanglan one. Even though I haven’t faced that with my PC, I suggested that
solution to my friends whose PCs, Pen Drives, and Memory Cards were infected.

Thank you so much

• 40. Rajesh | 27 December, 2007 at 9:02 am

There’s a still greater complication available….. System restarts whenever your

heal file is started, whenever you try to open regedit so on loads of times.

• 41. Andre | 27 December, 2007 at 9:08 pm

Ur program was sooo great! thank you!!!!

• 42. Sunny | 29 December, 2007 at 7:29 am

Thanks a lot pal..saved me a lot of time (of doing a format)…

• 43. Jeetu | 29 December, 2007 at 2:31 pm

 Hey thnx alot man ur Heal SSVICHOSST.zip file worked really well for me….
my task manager is all functional. I was gonna do a format, u saved me from it.
Thank you

• 44. piyushlabs | 29 December, 2007 at 6:38 pm

SATISH
using command prompt, delete the autorun.inf file,
“del X:\autorun.inf \a”
remove the pendrive, and again insert it back.
again do the delete command to check if the file still exists.
if it doesn’t, u can easily double click ur pendrive to open.
open it and dlete the virus files…

ARUN
open msconfig, and to startups…
uncheck the varioous s/w that u dont want to load up at the startup, e.g, qtime,
etc…
u’ll find many s/w that loads up, but u dont need them at all..

• 45. piyushlabs | 29 December, 2007 at 6:44 pm

RAJESH
u probably have brontok virus, or something like that that resrt comp always,
many times.

• 46. Mahesh | 2 January, 2008 at 9:11 pm

Hi,

I had downloaded the patch from the following link

http://piyushlabs.googlepages.com/Heal-nhatquanglan-104.zip

The problem still persists

• 47. piyushlabs | 4 January, 2008 at 1:55 pm

MAHESH
go for the manual prcedure, as described in the nhatquanglan page. coz there are
many varients of the virus, my program may not work properly.
• 48. mahindra | 8 January, 2008 at 1:27 am

hi,
thanks a lot for your brillant solution i have exchanged around 5 pendrive so far
and have decided to change my drive for 6th time but now my problem have been
rectified bloody nhatquanglan have been completely removed thanx mr now iam
an regullar visitor of this site c u

• 49. PAVAN VERMA | 9 January, 2008 at 12:56 am

how do i scan other drive for nhatquangan Virus.

Plz treat this as a very urgent.nhatquangan has effected my mobile card & D drive
of my PC
Please Suggest.Since i have downloaded the “Heal-nhatquanglan-104″ for that i
have runed the same as per insturction.But i want to scan my other drive insted of
C drive
PLZZZ HELP……

• 50. eric | 14 January, 2008 at 9:49 am

hi piyuzlab, i was able to delete the autotun.inf, thanks i waznt able to read ur
comment to aizaz, i can open now my jpeg files but again with exe extension.
muchas gracias. can i manually rename it without unwanted consequences?

• 51. piyushlabs | 14 January, 2008 at 11:18 pm

PAWAN
just delete autorun.inf from other drives.
thses viruses mainly affects the drive where windows is installed + root folders of
other drives. run “Heal for SSVICHOSST” to delete autorun.inf from all drives.

ERIC
if jpg files have got exe extention, those must be worms. scan them with some
latest updates of antivirus and repair them. i dont think, changing the extention
will work. if it works, then well n good : )

• 52. Azim Rizvi | 19 January, 2008 at 12:00 am

I tried ur following Steps :

To remove virus from removable drives: :

1. First run my heal program, or follow the manual steps.
 2. Make sure u can see all the hidden files, n system files. (eg. ntldr, ntdetect in
C:\)
3. If not, Open MyComputer goto Tools>Folder options>Views ,
Select “show hidden files/folders”
Uncheck “Hide protected system files”
4. Insert ur removable media,
5. Open MyComputer.
6. NEVER DOUBLE CLICK UR PEN DRIVE
7. GotoView>ExplorerBar>Folders
8. You will see a tree structure on left hand side.
9. Single click on PenDrive, in the LHS tree view, to open the pen drive.
10. Open “Autorun.inf” file in notepad n check its contents. This file auto-
launches the virus when ever u double-click the drive.
11. Delete the autorun.inf and the other virus files….

But…The ntdetec and autorun files keep coming back immediately…HELP..!!

• 53. Sri | 29 January, 2008 at 1:57 pm

Thanks….
yur patches have been effective and saved my day great!!!!
regards
sri

• 54. farhan baig | 29 January, 2008 at 6:01 pm

please

• 55. Virender | 30 January, 2008 at 4:23 am

Hi.. dude,

was just googeling bout viruses bd their behaviour pattern nd got struck to your
page.. well allthough am a lawyer by profession..but love to play with
softwares… i mean doing trouble shooting nd all.. its nice thatu r helping people
to get rid of malwares nd virus… good work man.. even i do programmnig on C
but been out of touch since i started my law… as of now trying to get bk on it…

i used certain of your tools to repair my frnds comps.. who either dont have
antivirus.. or it is not update… which helped a lot.. thanks a ton man… nd keep it
up…

• 56. Raj | 3 February, 2008 at 11:42 am

 Hey Piyush….

I truly thank you for that heal for ssvichosst.exe…

• 57. Mehul shah | 3 February, 2008 at 11:09 pm

Hi, I have Windows98, is ur antivirus for ssvichosst run for it? I tried but no
result, what I do?

• 58. piyushlabs | 4 February, 2008 at 1:33 pm

MEHUL
actually i havn’t tried on Win98. It was mad for XP. If its not giving any results,
then follow the manual procedure, as stated in the other concerning page.

• 59. Mali | 5 February, 2008 at 3:13 pm

I am having issues.
I’m not computer literate so I was wondering
whether you could give me step by step
instructions on how to remove the virus on my comp.
All I know is this Autolt v3: scvshosts.exe
and it asks me to put a disk in.

• 60. Sumit Kumar Saxena | 7 February, 2008 at 3:06 pm

Sir, I am Sumit from Pantnagar University.

I am a Computer H/W workar here.

Your This webside is very good.

Thank for you Support.

• 61. dinesh | 7 February, 2008 at 3:27 pm

Iam ur fan.Know more better praise

than that,Hope u write more such anti
virus programs to help our pained computers smile
and if u hav the time please do send me
the code for all these progs

• 62. Jp | 15 February, 2008 at 9:55 pm

 dude i need help here! and i mean serious! i tried everything you told me but still
the New Folder.exe file on my usb cannot be deleted. it keeps coming back. and
also the task manager and all other system stuff just opens for like 2 sec. how do i
stop this? its giving me nose bleeds.. help me…

• 63. gangadharan | 17 February, 2008 at 7:48 pm

Bravo Piyush. Nice work and support.

• 64. Mohammed Mohsin Ali | 20 February, 2008 at 11:47 am

Your clean PENDRIVE is an application worth

praising.

• 65. Thomas | 20 February, 2008 at 2:35 pm

I need a heal to reverse and kill w32.gammima.ag

I like what you are doing and please keep producing more fixes…..
Please email me directly…. If you can

• 66. Bhagyesh | 20 February, 2008 at 8:46 pm

oh my god!!!!!!! this is really fentasic!!

i must congratulate u for this.
just keep it up!
BEST OF LUCK!!

• 67. aaronic | 21 February, 2008 at 10:42 pm

http://piyushlabs.googlepages.com/Heal-nhatquanglan-104.zip

detected by bitdefender as Generic malware..

• 68. piyushlabs | 22 February, 2008 at 3:43 pm

DINESH
y u need the codes…??/?
btw, the codes are simply stated as in the “Manual Procedure” : )
 JP
can u please post the deatils of that exe file, eg file size,version,etc

• 69. Raghunandan BS | 23 February, 2008 at 2:55 pm

Hi
Thanks Once again
Hats Off to you

• 70. Bhagyesh | 24 February, 2008 at 8:20 pm

thanks a lot piyush! my folder options got

activated again.

it’s really amazing.

• 71. piyushlabs | 25 February, 2008 at 6:19 pm

AARONIC
yes dude, i saw that..
its very sad…

• 72. TP | 26 February, 2008 at 9:18 am

i had virus in PC. removed it with antivrus. but now the C and D drive doest open
normally but opening with the window”open with”. please suggest some remedy
to this problem.

• 73. piyushlabs | 26 February, 2008 at 12:55 pm

TP
this is because there exists a file named “autorun.inf” in those drives.
u need to delete them.
Start>Run>type “CMD”
del c:\autorun.inf /a /f
del d:\autorun.inf /a /f
log off and relogin

• 74. PEKANBARU | 26 February, 2008 at 4:17 pm

thank’s friends
• 75. gulrose | 27 February, 2008 at 7:10 pm

funny virus come back on restart

• 76. Murtuza | 28 February, 2008 at 12:13 pm

Hi,dude ….did u Recive my mails on yahoo or not …?????

• 77. Murtuza | 28 February, 2008 at 3:02 pm

Hey Dude just watch this out :–

http://blogs.pcmag.com/securitywatch/Results-2008q1.htm

• 78. sarvanan | 29 February, 2008 at 9:29 am

thanks for your great help…

may god bless u

• 79. prakash | 1 March, 2008 at 3:30 pm

hai my pc affected virus,because of that

i’m not able to open any application,restore,
system properties,cmd,…. aslike mostly
everything but i can open local drives
no problem, please give any solution
by
prakash.N

• 80. gulrose | 2 March, 2008 at 2:59 pm

did not receive your mail. probleb still exist. funny ust virus reappear on start up
and please tell me how to run patches of other viruses like new folder, scvhost

• 81. piyushlabs | 3 March, 2008 at 8:03 pm

GULROSE
please download 1.bat and 2.bat files and follow the steps when u run 1.bat file
 for other viruses (wont work for some newer versions of viruses):
download and run other respective heals.

MURTUZA
thnx for that. i’ll upload today.

PRAKASH
please install a good antivirus with latest update.

• 82. chandan chandna | 4 March, 2008 at 6:43 pm

its good, but dear i wand cure for the hidden

folders, i.e virus has made my folder hidden
by disabling the hidden option in folder property
, pls help me , my mail is luckyprime@yahoo.com
it is disgusting virus, how i can make folders hidden
property visible. pls help, its urgent

• 83. shiva | 6 March, 2008 at 5:13 pm

hi
u r working for others thats nice, i too have a prob , my system is REBOOTING
frequently , n some it reboots immediatly when i start i.e windows, pls help me to
resolve that prob. And am not able to open my local disks when i double click( it
opens a OPENWITH )window whats the reason. plsssssssss

• 84. jagan | 7 March, 2008 at 3:25 pm

my system is full of funny scandal virus plz tell any suggestion

• 85. jagan | 7 March, 2008 at 3:27 pm

which anti virus software is better

• 86. ravi | 7 March, 2008 at 4:35 pm

My system is getting dailog boxes at the time of opening

C:\windows\inf\other.exe
C:\windows\system32\config\win.exe
C:\windows\system32\config\winsit.exe
how can i solve it
• 87. sarvanan | 10 March, 2008 at 10:18 am

thanks for great help

• 88. piyushlabs | 10 March, 2008 at 10:38 am

CHANDAN
download and run heal for ssvichosst and for ntde1ect.com

SHIVA
Start>Run>type “CMD”
type
“attrib c:\autorun.inf -h -s”
“attrib d:\autorun.inf -h -s”
and right click explore the drives, and delete the “autorun.inf” files
Log off and relogin
Download Antidote, and disable any virus program that may restrating ur comp.

JAGAN
download 1.bat and 2.bat files and run them.
Run 1.bat simply, and follow the instructions properly.

RAVI
Download Antidote, select the system startup optons.
Disbale the entries like other.exe, winsit.exe, etc

• 89. gulrose | 11 March, 2008 at 8:21 pm

unable to run other heals. is their specific procedure to runthese which i am

missing

• 90. OcrazyO | 12 March, 2008 at 6:03 am

thanx good work the heal for ssivchosst.exe save me from a long work lol

• 91. sandipan roy chowdhury | 12 March, 2008 at 11:36 am

ur suggetion is great 4 ntde1ect.com

• 92. jagan | 13 March, 2008 at 2:19 pm

 Thank U Piyush for quick reply

• 93. Piush | 16 March, 2008 at 10:29 pm

First of all i would like to thanks to your

virus removal prog. for Pen Drives. Secondly,
when i scan my pen drive with AVG it shows
autorun.exe as virus, is it really a virus??
for i thought autorun.exe is a program to
automatically run the removable drives.
if thats a virus, kindly let us know how to remove it?
thanks,
Piush

• 94. claire | 20 March, 2008 at 4:01 am

Thank you so much! I’ll bookmark this page so I can visit it again in the future.

• 95. piyushlabs | 22 March, 2008 at 10:56 am

GULROSE
copy taskkill.exe to c:\
and also to c:\windows\system32\ (if u have laptop)
please use capital “Y” , when asked for

PIUSH
no.. first of all stop using my name
autorun.inf is not a virus, but just a helping file for viruses.
it helps to target to run the virus file, if u double click the Drives.
simple delete it, for removing.
if it comes back again, that means u have some active virus/trojan

• 96. Rmn | 24 March, 2008 at 12:10 am

Piyush,

Thanks for your solution. I was able to clean the virus from my system. I have
mentioned abt you in my blog http://rmn-
world.blogspot.com/2008/03/killerexe.html. Do check it out!

Thanks again.
• 97. rahul | 25 March, 2008 at 5:04 pm

i have tried your way to clear ssvihosst.exe virus but failed. can u tell me what to
do.when i start the system it shows that the file ssvihosst.exe is missing.

• 98. Mudit Vaidya | 27 March, 2008 at 10:10 pm

Hi !

I am designing an anti virus. I want to detect Nhatquanglan using my anti virus.

How to detect this ?

Thanks !

• 99. sarvanan | 1 April, 2008 at 10:38 am

sir good morning ,,

In my office virus attacked all the pcs ,,,

the virus name ic BLOODHOUND.PACKET.JMP

THIS VIRUS AFFECTED PCS,,

1..TASK MANGER DISBLE
2.FOLDER OPTIONS
3.REGEDIT NOT OPENING
4.PINGCOMMAND NOT WORKING
5.ANTI VIRUS NOT RUNNING

AT ANTI VIRUS SOFTWARE OPENING TIME WINDOWS

INSTALLER MENU WILL OPERING ….

GIVE ME SOLUTION FOR THIS PROBLEM

• 100. piyushlabs | 1 April, 2008 at 1:38 pm

RMN
thnx

RAHUL
did u try the manual process or used the heal software?
follow the last step of manual step
 MUDIT
there are a lot of varients of this virus
1 thing common is that they are build on AutoIt

SARVANAN
can u send me the virus file, zipped and password protected
u may be able to fix all thses problems temprarily (u can use my heal ssvichosst)
but it can be fixed permamently after removing the virus from startups, etc
try to fix it urself:->
download my heal_for_ssvichoost.exe and rename it to a.exe and put it in
windows folder
restart in safe mode with command prompt (press F
type a.exe , press capital “Y” to run the heal
type “taskmgr” to run task manager
in the task manager, goto File>new task
run “msconfig”
disable suspected and unwanted startups
this should fix the problems

• 101. pradip | 7 April, 2008 at 2:05 pm

i cannot open system volume information folder .my folder option does not work
.any vbs script file is unable to run please help me.

• 102. piyushlabs | 7 April, 2008 at 4:57 pm

PRADIP
users as well as administrators do not have right to open “System Vol Info” folder
in NTFS. Use heal for ssvichosst for folder option problem.i dont know y ur vbs
script is not running..

• 103. selva | 8 April, 2008 at 1:19 am

dear piyush
my right click only displays half and also sometimes it doesnt work at all. also in
the links on webpages it doesnt work at all. this problem is from today only.. i
already hav trend micro internet security installed.. but still im facin the
problem… n also the system has bcome slow….wen i right click on any folder..it
only displays..”create shortcut, delete,rename & properties” only but it doesnt
show ‘OPEN’ at all……..pls help me recover from this

• 104. selva | 8 April, 2008 at 1:51 am

 dear piyush
now my DELETE also doesnt work….im unable to delete ny file or folder….even
im unable to open ny folder…with gr8 difficulty if im able to open a folder then it
doesnt hav the Tool Bar in it…
plssss help.
SOS call from selva

• 105. piyushlabs | 8 April, 2008 at 1:06 pm

SELVA
there has been possibly a severe changes/damage to the registries. Try if system
restore works…

• 106. vishesh | 8 April, 2008 at 3:52 pm

I thank piyush lab for creating this fantastic softwares.So never stop creating
software like this

• 107. anil | 9 April, 2008 at 7:09 pm

thanks buddy i suffering from winhelp

can u plz send some info abt its working

• 108. madhan | 11 April, 2008 at 7:12 pm

hi ..

my system often gets affected with malwares..

i have installed AVG antispyware .. but i still get it anyway…

wt may be de resons … is there an ways to drive it away..

• 109. piyushlabs | 14 April, 2008 at 8:44 pm

VISHESH
sure

ANIL
check the page
http://piyushlabs.wordpress.com/regsvr/
 MADHAN
mainly spreads through removable media,
take care while using pen drives.
i suggest to install Kaspersky,
and turn ON its registry graurd.
so many malwares coming up nowadays…

• 110. kadam | 15 April, 2008 at 12:22 am

mate im havin a serious problem…my system reboots automatically evry few

mins. its painin me severely…coz in the middle of workin it reboots n i’ll hav to
start over again. i hav trend micro internet security…even then… wen i run full
system scan for detectin the virus..immediately it reboots. i tried system system
restore….in the middle of restore it again reboots…im completely helpless..
pls suggest some solutiion frnd.

• 111. akash lamba | 15 April, 2008 at 12:07 pm

u ppl r really doing a gr8 job which is being appreciated by many of my frnz also
bcoz i removed the ntdetec.exe virus frm their pc

• 112. Arun | 16 April, 2008 at 8:23 pm

Hi Piyush,

My hard disk is making some sounds and its not getting booted. While booting a
message is showing “Primary Hard Disc Error”. But it is recognizing in BIOS. I
can see the HD Name in the IDE Configuration list.

Can suggest me a way to retrive the data from that HD, coz I have very important
files saved on that. Please help me in this regard.

Thank You.
ARUN…..

• 113. Major | 18 April, 2008 at 10:02 pm

hello sir when i open any folder then it become .exe.

and after scan with nod32 anti virus. when i open infected folder then it become
system file and become hide from me. i also unable to show hidden and system
files.
• 114. Major | 18 April, 2008 at 10:04 pm

hello sir when i open any folder then it become .exe.

and after scan with nod32 anti virus. when i open infected folder then it become
system file and become hide from me. i also unable to show hidden and system
files.

• 115. piyushlabs | 19 April, 2008 at 6:45 pm

KADAM
hope u dont have Brontok virus
check the startups from MSCONFIG, and tell me..
also check if it reboots in safe mode also
Perform a “hijackThis” scan and mail me the log file…

ARUN
u can use bootable cd or floppy
or u can use Live Linux CD (best option)
or Bart PE Builder

MAJOR
u have some active malware
reply back with the complete properties of that .exe file that u get on right
click>properties

• 116. kadam | 21 April, 2008 at 2:13 pm

hi piyush
my system doesnt boot in safe mode at all, i.e, while trying to boot in safe mode,
it just shuts down the system.
reg ‘hijackthis’ scan, i dont know how to do it…pls explain
pls help

• 117. piyushlabs | 21 April, 2008 at 4:42 pm

KADAM
open regedit and goto
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
and set
AlternateShell = CMD.exe
Wait a few secs and do refresh
If the settings are corrupted again. Then, make the settings and suddenly restart
the comp.
 (I thinks this is the worst method found out by me.)
Otherwise u need to change the registry offline form BartPE CD
First try this…
U should always use “safe mode with command prompt” and make changes. Task
manager will be working. Launch files from there. Do not Launch explorer.exe\
Mail me the HiJackThis Log piyushlabs@gmail.com

• 118. sachin | 22 April, 2008 at 3:18 am

Hi Piyush,

I have tehse viruses:

C:\WINDOWS\hinhem.scr
”http://nhatquanglan.xlphp.net/“

There was also a virus which used to make a dumplicate copy of the same folder
name.

I have run folllowing:

Heal-nhatquanglan-104.zip,Heal-SSVICHOSST.zip and Heal-Mahsa-NewFolder-
102.zip

But still, I cannot open Task Manager and regedit..they just come for fraction of
second..

what would be the solution…?

• 119. Prashant | 22 April, 2008 at 10:04 pm

Hi piyush,

Firstly i would like to thank you for extending your support to so many people in
need. Keep it up.

My problem is that, i got the “win32:007Spysoft(tool)” malware from a pendrive

and it spread to all (2 more) PCs on my office network. I have Avast anti-virus on
all the 3 PCs. It tells me to restart and do a complete memory test and detects the
virus and removes it. But after removing and completing the test, it tells me to
restart the PC and again detects the virus. I have no idea what to do.

The virus has already started to show its effects. It has started copying files on my
drive i.e. they multiply . So even if i remove the virus, will these duplicate files
get deleted or will i have to manually del them.
• 120. Arun..... | 23 April, 2008 at 8:12 pm

Hi Piyush,

This was my problem.

(My hard disk is making some sounds and its not getting booted. While booting a
message is showing “Primary Hard Disc Error”. But it is recognizing in BIOS. I
can see the HD Name in the IDE Configuration list.

Can suggest me a way to retrive the data from that HD, coz I have very important
files saved on that. Please help me in this regard.

This is your solution

(u can use bootable cd or floppy

or u can use Live Linux CD (best option)
or Bart PE Builder)

Can you please explain a little bit of what happens with Live Linux CD?

Thank You
ARUN…..

• 121. Bhagyesh | 23 April, 2008 at 10:02 pm

i m suffered from boot.vbs and ccsvchst.exe pls do something for those

• 122. sachin shedge | 24 April, 2008 at 1:44 pm

hi piyush ,

i faces this problem

{

windows cannot find c:\windows\inf\other.exe

and
windows cannot find c:\windows\system32\winsit.exe

}
please can u tell me abut this error

thanku,
• 123. Karim MOhammad | 1 May, 2008 at 9:26 am

Hi Piyush this is Karim from India i feel very happy on getting this files cause in
our District in all Government Officer we are facing more problem with virus and
I got from U. Thank you very much

Karim

• 124. Ajay | 1 May, 2008 at 11:34 am

i am unable to use the ‘h’ character key of my keyboard..

Most likely it is a virus. I am only able to copy paste tis ‘h’ character.
Once i go to the start menu, the options don’t pop up and i just get the help box of
Compaq in whic in the search dialog series of ‘h’ keep getting typed by itself.
Then using ‘ctrl-alt-del’ from te task manager i have to kill a process
NclBTandler.exe and then the start option works, but still ‘h’ caracter remains a
problem.
Also during booting i am getting a continous beep sound wic subsides only if i
press any caracter key from t i am unable to use the ‘h’ character key of my
keyboard..
Most likely it is a virus. I am only able to copy paste tis ‘h’ character.
Once i go to the start menu, the options don’t pop up and i just get the help box of
Compaq in whic in the search dialog series of ‘h’ keep getting typed by itself.
Then using ‘ctrl-alt-del’ from te task manager i have to kill a process
NclBTandler.exe and then the start option works, but still ‘h’ caracter remains a
problem.
Also during booting i am getting a continous beep sound wic subsides only if i
press any caracter key from the keyboard.
Also at times during surfing, suddenly series of ‘h’ starts getting typed…it
appears very spooky.
Please help as to how it can be rectified.

Also at times during surfing, suddenly series of ‘h’ starts getting typed…it
appears very spooky.
Please help as to how it can be rectified.

• 125. P.Chandrasekhar | 2 May, 2008 at 4:31 pm

Dear Piyush,

Thanks a lot. I got rid of the virus regsvr.exe with your help.

Indeed you are doing a great service.

• 126. Sanjiv | 3 May, 2008 at 11:47 am

Hi Piyush,

My systems(with Windows XP) at office have got infected with viruses,

Due to virus, system is creating a .exe file in each folder with the same name and
I can not access taskmanager, regedit, it does not even let me open drives by
clicking on their Icon .

After going thru you site carefully and studyig similiar cases,
I have run folllowing:
Heal-nhatquanglan-104.zip,Heal-SSVICHOSST.zip

but with no success.

I have even tried SAFE Mode but in safe mode also it does not let me use regedit
etc.

Systems are connected on local network so problem are replicating as we are

bound to share the data for various reasons.
We have huge data on each system, so formatting all the systems is not viable for
us.

One more thing I woud like to share, files copied from this system shows infected
by : (when checked by NORTAN )
Virus:
Trojan Horse, W32. Blastclan, W32 Rajump

Please do suggest me something,

with regrads,

• 127. Shreyans | 3 May, 2008 at 1:32 pm

Hey Piyush
Thank you for your upload on how to remove SSVICHOSST.exe. I was really
having a hard time. My blessings are with you. Keep up the good work.

• 128. SAUMIL | 4 May, 2008 at 12:49 pm

Hey piyush,
your antidote & your task kill & nhatquanglan worked for 2 seconds & again the
 same things appear.My task manager, reg edit & folder option is not
working.please give me a solution as fast as possible so my computer can work
properly

Thanking you,

• 129. Kurt | 5 May, 2008 at 6:57 pm

Hi Guys,
I am unable to download;

http://piyushlabs.googlepages.com/HealAntiVirus1.31.exe (new)

Remove viruses from Pen-Drive

http://piyushlabs.googlepages.com/healpendrive_1.0.exe (new)

Can some one zip it and mail across to my mail id which is kurt.cobain@aol.in

Download my Crackers

• 130. verma | 7 May, 2008 at 11:13 am

Hi Piyush,

I have found few files with autorun.inf directing xlu8a8sy.exe and it creates many
files including v.exe, jfvkcsy.bat and xlu8a8sy.exe itself into all drives keeping
them hidden. autorun.inf runs in every few seconds. kindly help

• 131. Doubtysmurf | 9 May, 2008 at 8:32 am

Hey man,
U r doin a good job…of healin virus infected system…
it would be great if u made ur programs open source…

• 132. gulrose | 11 May, 2008 at 8:12 pm

i am a beginner in computers. i down loaded all heals on your site but dont know
how to run those. for example what do you mean by ‘ copy taskkill to c:\, copy
2.bat to windows. pleadse make me understand with easy steps. how do you know
that you have autorun virus and recycler virus on your comp. are autorun.inf and
autorun.ini both viruses. and if you run heals without having viruses on your
comp will that damage your system. pl help
• 133. piyushlabs | 12 May, 2008 at 1:13 pm

SACHIN
use heal_nhatquanglan

PRASHANT
can u send me the virus file
u need a proper step by step solution for such viruses

ARUN
m not sure if it will work or not
get a Live(bootable) Linux CD, (almost all linux cds have live cd option)
eg, UBUNTU
u can ask any of ur friend or any compsci student

Download BartPE Builder

use insert ur xp cd
this softwaare will create a bootable cd

bootable= u can start an Operating System (small windows / linux)

without hard disk, only from CD.
now copy the files to another comp via a pen drive

if ur HDD has some hardware error, then it wont work

BHAGYESH
havnt heard, send me the virus files.

SACHIN
update ur antoivirus, it as old virus

AJAY
check ur mail

SANJIV
Download ProcessXP from sysinternals.com and end task the virus process
probably with pink color
dload and run my Heal_Antivirus
use msconfig to remive from startup
now search for file with size<2mb , *.exe and delete suspected files

SAUMIL
Download ProcessXP from sysinternals.com and end task the virus process
probably with pink color
 dload and run my Heal_Antivirus
use msconfig to remove from startup

KURT
y dude, the links are working

VERMA
send me those files

DOUBTYSMURF
all the solutions are open to all as manual steps
just to make it easy to run i’ve made programs

GULROSE
copy the file “taskkill.exe” in your c drive
if u dont understand how to copy, them i can’t help u dude
it wont damage ur comp, if u run without virus in ur comp
autorun.in is helping file for viruses which spreads via pendrives

• 134. gulrose | 12 May, 2008 at 9:19 pm

hi piyush i know how to copy but where in c drive windows or program files or
documents and setting. and what about autorun.inf virus thanx

• 135. mervin | 14 May, 2008 at 11:32 am

Hi piyush.I have ntde1ect.com viruses on my pc and im very glad to come across

your programs to remove it.My problem is that my windows files are on ‘D’ drive
not ‘C’ as your program.
Could you send me the program whereas windows is installed on ‘D’ drive?
Many thanks

• 136. clowie testorillo | 15 May, 2008 at 5:28 pm

hi piyush i also have jfvkcsy.bat in my drive like verma has, i can’t seem to delete
it and it’s autorun.inf. i have deepfreeze on my drive c: so it only infects my drive
d. can you please make somethin to remove it. thanks a lot and might i just add
that you are a real hero for helping all of us with pc problems that are beyond our
knowledge to remove. mwah!

• 137. clowie again | 15 May, 2008 at 7:59 pm

 hi piyush, your ntde1ect.com virus remover / avpo.exe virus remover actually
solved my jfvkcsy.bat problem ^__^. thank you so much. it helped me detect the
hidden filed and let me delete them now my pc is virus free again, all thanks to
you ^__^ mwah!!!

• 138. sanat jain | 16 May, 2008 at 8:52 am

hi piyush,

thanx a lot for giving such an good tools open for all, really u are great. well i hv
tried ur tips on 2-3 systems but i was not successful to enable cmd and regedit,
taskmgr in the first 2 system. i guess cuase i had installed avira antivir on those
systems. but when i tried for the 3rd time whre the same avira was been installed i
could able to enable cmd and regedit but not the folder options which was badly
required.
well i will try again, anyways as the comments i read it really seems your tips &
tools really works.

thanx once again

sanat jain

• 139. saurabh | 19 May, 2008 at 1:50 pm

hi piyush, problem with my computer is whenever i boot it it shows amvo.exe -

application error i know its a virus, how 2 remove it. i formatted my c: drive but i
think it still exist in d or e drives. PLS HELP

• 140. manickam | 20 May, 2008 at 8:35 pm

hai sir

my taskmanager, regedit, msconfig are disappearing in fraction of seconds and

also i not able to delete the file “C:\WINDOWS\system32\SCVHSOT.exe” its file
description is “Nhatquanglan”
please guide me

thank u

• 141. Sudip | 22 May, 2008 at 1:13 am

Thnks Piyushlabs…. you guys are great…keep up the good work..

 god bless you

bye

Sudip

• 142. babu kumar | 22 May, 2008 at 6:56 pm

hai sir

my taskmanager, regedit, msconfig are disappearing in fraction of seconds and

also i not able to delete the file “C:\WINDOWS\system32\SCVHSOT.exe” its file
description is “Nhatquanglan”
please guide me

thank u

• 143. reddyjalla | 22 May, 2008 at 7:24 pm

sir , can any one help in solving my problem .

when ever i switch on my computer before bios settings it shows that diskett error
0 (zero) . i have never experienced such problem and was wondering what to do .