How to remove Newfolder.exe virus

by Rohit Khurana on February 12, 2008

Advertisement

Trouble:

One of our readers reported about a virus in his pen drive,his drive is infected with Newfolder.exe virus. He has some very crucial data on the drive, so he cannot format the drive.

What is NewFolder.exe virus?

New Folder.exe virus disables task manager, disables registry editor, disables folder options, and disables run option from start menu. Virus creates exe files like the icon of folders with the same name as the name of the folder, it also consumes more than 50 % of your processor usage so slows down your computer.

Let’s see how we can remove this virus without formatting the drive.


Fix:

In order to remove the newfolder.exe virus you can use two types of tools, again there is a manual procedure also but the tools mentioned below are much better:

Tools to remove Newfolder.exe virus

1. Newfolder virus removal tool by Muhammad Abdullah. Download it from here

Advertisement

2. Newfolder Virus removal tool by Albin. Download it from here

Both of these are executable files, download any one of them and run the file by double-clicking on it, it will clean the virus.

If you find some problem in using any of the above mentioned tools. Please let us know through comments.

Manual Method:

You need delete a file named svichossst.exe where ever you find this file on your system

Remove the following keys from registry

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
“@”=[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“Yahoo Messengger”=

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
“Shell”=”Explorer.exe “

We hope at least one of the above method given above will help you fix the trouble.

If you like this article or this article helped you, you can +1 to recommend this article on google plus.

You can follow us on Twitter or join our Facebook Fan Page. If you have a question to ask us, submit your question at Answers By Trouble Fixers.

Looking for something else? Search here :

{ 61 comments… read them below or add one }

Nidal Kamal February 15, 2008 at 9:59 am

Forticlient Antivirus reports that both of the above files have virues in them. Is this a flase postive, or what?

AMIR February 22, 2008 at 4:18 am

Hi,
I like to know that i am facing problem while clicking show hidden file in folder option.AS i click show hidden folder and apply it is applied but hidden folders are not shown and as i check backit is unchecked and the selection goes back to do not show hidden files and folder.
Can u help me
Thanks

Nidal Kamal February 28, 2008 at 3:08 am

Hi,

Please check back on this same site the follwoing link

http://www.troublefixers.com/hidden-files-and-folders-are-not-visible/

anoop March 3, 2008 at 2:45 pm

this stuff is not workin… i have been tryin all nite 2 get this done…. no avail… the virus remains….

Rohit March 3, 2008 at 7:36 pm

@Anoop
You should run an update of your anti-virus software and try run a full system scan after that. It might help.
Fingers crossed!

bhopal singh March 4, 2008 at 11:13 pm

Hey dude u r so intelligent .you fix my the promblems related to
disable REGEDIT ,tskmanager,gpedit. THANKS FOR It …..

But Now i have to face another problem .it’s due to a virus ..

1. when i inserted my pen drive in computer then it
automatically create the two folder:-

a. NEW FOLDER.exe
b. schivost.exe

2.My CMD Prompt,REGEDIT,TaskManager,Gpedit is not disabled..

but whenever i try to open them they opens for a moment and
just for 1 or 2 second and closed automatically .

3. When i tried to Restore the system to previous setting .
A message has been Showed RESTORATION INCOMPLETE.

4. I scanned my Computer by following antiviruses:

1.kaspersky 7.0.0.125
2. Antivir Professional Edition(latest)
3.AVG Antivirus (Latest Version)

but no one can detect the virus..

so i m in lot of trouble Please help me guy i will be heartly thankfull to you .

I again and again Request u to Please send me the solution of this problem as soon
as possible becoz my all works are halted from this VIRUSE .

I m waiting for ur Appreciated and precious Advice.

vijay March 17, 2008 at 8:03 am

i use Escan anti virus &update but no any virus delete

Mahendra More March 18, 2008 at 1:22 am

Hi friends can any one tell me is this tools are really working cause my computer is also infected by this virus.

ravindra March 22, 2008 at 8:12 am

oh god

really thats all working

gosssssssssss

iam very happy 4 this u r really

really dammmmmmmmmmmmmmmmmmmmmmmmmmmm

genius

thank a lot

waqar saleem baig March 22, 2008 at 10:48 pm

this software is not useful for removing the new folder virus

lalit April 22, 2008 at 1:23 am

Hey dude u r so intelligent .you fix my the promblems related to
disable REGEDIT ,tskmanager,gpedit. THANKS FOR It …..

But Now i have to face another problem .it’s due to a virus ..

1. when i inserted my pen drive in computer then it
automatically create the two folder:-

a. NEW FOLDER.exe
b. schivost.exe

2.My CMD Prompt,REGEDIT,TaskManager,Gpedit is not disabled..

but whenever i try to open them they opens for a moment and
just for 1 or 2 second and closed automatically .

3. When i tried to Restore the system to previous setting .
A message has been Showed RESTORATION INCOMPLETE.

4. I scanned my Computer by following antiviruses:

1.kaspersky 7.0.0.125
2. Antivir Professional Edition(latest)
3.AVG Antivirus (Latest Version)

but no one can detect the virus..

so i m in lot of trouble Please help me guy i will be heartly thankfull to you .

I again and again Request u to Please send me the solution of this problem as soon
as possible becoz my all works are halted from this VIRUSE .

I m waiting for ur Appreciated and precious Advice.

Rohit April 22, 2008 at 1:45 am
Pema Marley May 18, 2008 at 4:16 am

Hi buddies,

I happen to browse this site and find out many useful information. I have got a big problem in my network computers. Whenever I try to create a new folder by using File *** New *** Folder command, it automatically changes its attributes to Application instead of showing folder when I hover the mouse on it.

I kill the procees named Services.exe and some others and the problem just melts away. Please I need further help on this.

The students have put all there photos under this infected folder named *.exe and they can’t able to see it in Adobe Photoshop or others.

cherian May 25, 2008 at 7:02 am

you would need tune up utilities to fix this problem
open process manager.
end process ssvchosst.exe
go to start up manager and disable entry named yahoo messenger .
right click on it and click properties .copy path of virus .
open tune up shredder and paste the path.
delete the file.
open registry editor
then
# double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>
Windows NT>CurrentVersion>Winlogon
# In the right panel, locate the entry:
Shell = “Explorer.exe SSVICHOSST.exe”
# Right-click on the value name and choose Modify.
# Change the value data of this entry to:
Explorer.exe
1. Still in Registry Editor, in the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>Windows>
CurrentVersion>Policies>System
2. In the right panel, locate and delete the entries:
DisableTaskMgr = “1”
DisableRegistryTools = “1”
3. In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>Windows>
CurrentVersion>Policies>Explorer
4. In the right panel, locate and delete the entry:
NofolderOptions = “1”
5. In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>
Services>Schedule
6. In the right panel, locate the entry:
AtTaskMaxHours = “0”
7. Right-click on the value name and choose Modify.
8. Change the value data of this entry to:
72
9. Close Registry Editor.

anil parit June 3, 2008 at 3:53 am

newfolder virus exe

susheel kumar June 15, 2008 at 8:39 pm

hi yaar…i tried to clean the new folder.exe virus using the tools mentioned above…but both if them failed…is there any other way to get rid of it….

wormhead July 3, 2008 at 12:30 am

This tools do not work on my PC.. new folder still remains and the task manager, folder options, regedit and run command are disable..

amaan July 7, 2008 at 9:58 am

i have a problem i remove all exe files with folder icon but my orignal folders are not appearing in explorer but they are present in the hdd it appear in nero while write a cd my folder option is working well regedit cmd taskman everything is allright please tell me the solution

M. Rehan Bhatti July 20, 2008 at 8:33 pm

hello,

i have a problem of newfolder.exe and also this file has create many exe files in the exist folder name.

but when i use sdfix download ans the run it to on administrator root after some minute my probles has been solved.

thanx.

SAdam August 5, 2008 at 5:01 am

It is better to use the manual!!

Yo da man!!

SUNNY August 24, 2008 at 7:08 pm

HI GUYS,

EVEN MY PENDRIVE IS EFFECTED DUE TO THIS VIRUS, I TRIED TO FORMAT MY PENDRIVE BUT IT IS GETTING FORMATTED.ANY PENDRIVE WHICH IS INSERTED TO MY COMPUTER IS GETTING INFECTED

PLEASE ANYONE GIVE ME THE EXACT SOLUTION.

mojgan August 31, 2008 at 3:01 am

hi,my pc has been infected with “newFolder.exe” virus about 5 month or more,now even my window xp is not working,and it doesn’t come up,I try installing new window xp ,but after some part of installation when it shoud be reboot,it reboots but it stops continuing the rest of installation,what shoud i do now?
i’m hoping to hear from you.

rahul September 19, 2008 at 3:15 am

virus removal tool by Mohd Abdullah is excellent…..wrked for me

drr September 20, 2008 at 3:43 am

I also face the problem of new folder.exe virus in my system and as well as in my pendrive. today i think that any solution would be on inernet about this virus. then I search about this and look your suggestion. mean while I delete amy times this virus created files from harddisk and also pendrive. besides this anty virus program named kaspersky also detect this virus and remove them but in next time it will again created. I also try to remove the files like inf or exe and hidden folder thru windows 98 version as they are shown in win 98 version to enable the hidden files and folder option. they are removed but when again run the windows xp or other os they are again clreated.
Now I try your solution and software to sovle this problem
thanks for guide. I hope this shall solve my problem

Renjith.R.Nair September 23, 2008 at 2:57 am

Here is an easy way for removing non deleting newfolder.exe and auto run .inf from removable devices like pen drive,
memory card etc.
Actually this is happening due to a virus called Trojan.Autoit.gen,first off all kill this virus from pc,Lets see how i do that,End process named regsvr.exe from task manager by pressing keys alt+ctrl+del,After then remove this program from pc,for that delete folder regsvr.exe from c:\WINDOWS remove it from recycle bin also,remove from temperory folder,remove from prefetch,clear all internet history cookies etc.After that scan your whole harddisk with a good antivirus
i suggest clamwin is best its free download is available on http://www.clamwin.com/content/view/18/46/ it will remove all
.exe type virus from your pc.After then connect your pen drive but remember one thing scan pen drive and remove virus before
using pendrive,most better format it if possible before using.I hope that it will work fine.

Bizzare October 12, 2008 at 12:30 pm

well guyz , you should try this

first when u face , the newfolder virus , and when he disable the , regedit , run , taskbar .

well if all of these thigs are disabled try the following methods*

*method 1 : right click on ur desktop and create a new shortcut , and then browse for the path : C:\Windows\System32\Gpedit.msc
when it’s done , Gpedit.msc will be created on ur destop , gpedit.msc = Grouppolicyeditor.microsoft corporation

This tool contains all the access the and the restrictions for the Programs in your windows .

Now in the Gpedit.msn User Configuration_Administrative Templates_Start Menu and taskbar / Double Click On : Remove Run Menu From Start Menu and Then Press DISABLE , OK .

2nd step : User Configuration_Administrative Templates_System / Double Click on : Prevent Access To The Registery and then press Disable , OK .

When ur Done Log off , and log back on ,u will open start and u will find run , try to type Regedit , it should open , if it didnt opens , contact me for further information .

Bizzare October 12, 2008 at 12:34 pm

NOTICE : ********

For Avoiding Being Hit By This Trojan , Due to a USB flash memory stick , or anything , try to right click on start menu , EXPLORE all USERS , and THEN fron the left Tabed menu, Try to surf ur flash drive or memory stick , BUT DO NOT DOUBLE CLICK ON ANY FOLDER OR PROGRAM INCLUDED IN THE MEM STICK OR USB FROM THE RIGHT PAGE OTHERWISE U WILL BE INFECTED .

Thank u

Zahir November 10, 2008 at 7:20 am

hi frnd,

Thnx for that removal tool .By using the above tools ,i m able to access task manager as well as my registry ,which was disabled by the Newfolder.exe virus.But the problem is that the newfolder.exe virus is still present in D drive and even after scanning the drive with the above tool ,it doesnt detects them. Plz help , waiting for ur valuable guidance.Thnx a lots once again.

maddy December 15, 2008 at 9:31 pm

i have sparkle 7300 gt agp8x graphics card.some games like cod5,stalker clear sky install and start upto there menus but when i start the game after some time it shows “nv_4 display has stopped working……”and pc gets rebooteed itself.this problem has really freaking me out.please help!

Prateek January 20, 2009 at 10:41 pm

Hi,
The virus removal tool seems to work for me but the problem is that the virus keeps coming back. I ran the tool, got a success, checked windows settings, all task manager etc everything restored. I double checked by seeing start-up items in MSconfig and when I restarted the system. When I restarted then the virus seems to come back because my gtalk and yahoo messenger started again automatically and the task manager, registry editor etc were again disables. I tried running the tool again and it fixed the problem again but the virus came back again. So I would not say the tool does not work, but it seems that it nullifies the effect of the virus however does not kill the virus completely so the problem keeps re-occuring.
Please advice if you have any suggestions for me. By the way I am using a windows Xp.

VISHAL May 5, 2009 at 11:53 pm

I HAVE CAUGHT UP BY THE EYT.EXE VIRUS AND AUTORUN.INF FILES WHICH AFFECT MY COMPUTER I HAVE ALREADY INSTALLED THE AVAST ANTIVIRUS BUT I FAILS TO CATCH IT. PLEASE TELL ME HOW CAN I REMOVE THAT FILES FROM MY SYSYTEM WITHOUT GETTING FORMATTED THE SYSTEM…. WHICH IS THE BEST ANTIVIRUS SHOULD I USED FOR IT……

Fabio May 8, 2009 at 6:43 am

Hi, the best antivirus is KASPERSKY!
Install and Joy!

rajan misra June 5, 2009 at 11:05 pm

very nice

sanivesh June 9, 2009 at 12:14 am

did it works
my pc is also affected by it

satyanarayana anem August 17, 2009 at 5:42 am

hi,
frens, its good to see all system related problems. i clarified some doubts by reading all above posts. still are some unclarifield doubts like (1) i buyed new DVD R/W CD which is used only once. further i can’t format for further use its showing message “its abort to use” just one use only after its corrupted even i bought another new CD but same problems its become useless. & (2) i cannot run “regedit” from run command. and (3) iam using AVG free edition antivirus actually it should be updated every day but now a days even updated successfully still its showing error in e-mail scanner. some virus it found cannot remove even i applied to force to remove, but no use…can u solve any one of it….iam thankful to u all my frens bye..

soldier2gud4me September 9, 2009 at 2:45 am

There r other ways to detect and delete or stop viruses. Just open taskmanager if it can open or just use run and type “msconfig”. Then go to the startup area and uncheck the virus from autostarting.

Or u can install avg antispyware 7.5 if your task manager is disabled and go to analysis and click delete selected items after selecting the virus. The virus mostly looks like a folder.

I keep using these method, but i cant guarantee it repairs the damage the virus does, but i can guarantee u can stop the virus from autostarting as well as u can spot in which folder the virus is and manual or antivirus delete it.

soldier2gud4me September 9, 2009 at 2:48 am

And anyways guys, just use the tool uploaded by Muhammad Abdullah.

computer problem February 5, 2010 at 10:43 pm

which u share us its not gud i tried but it can,t work

problematic new folder May 5, 2010 at 8:40 pm

refering to Renjith.R.Nair, you said to download clamwin.
This antivirus could only detect the virus. How to remove it? Can this antivirus remove the problem with new folder virus?

somaye May 14, 2010 at 12:08 pm

hi,i have a problem whith viruse.i cant kill it.my antiviruse name is node32,it cant find this viruse.what can i do now??this viruse made folder in my drivs and flash it’s name is free microsoft games or newfolder(2).please help me..

somaye May 14, 2010 at 12:11 pm

when you open this virus,you see a sample game.please help me.

roshan May 17, 2010 at 4:12 pm

Cherian ,

Thanks a lot dude.. it worked.
the PC is clean now

M.Srinivas Gupta June 6, 2010 at 10:46 am

Links which you were given are broken, please update the same

vierofthephilippines June 7, 2010 at 7:45 am

webpage not found. :(

Mark August 14, 2010 at 10:04 am

webpage not found whats the software name?

ice August 19, 2010 at 1:14 pm

error on the page whenever i click the two above files!=(

Manolet Agoncillo August 30, 2010 at 10:57 pm

The two above mentioned links are broken. I always get the message invalid file name or ID. Please repost the two files again, please?

Rohit August 31, 2010 at 1:49 pm

@Manolet
I have updated both the links.
Thanks.

Manolet Agoncillo August 31, 2010 at 5:39 pm

Rohit, I have finally been able to download both links thogh I still have to try and see if they works. Having said that I still wanted to thanks a lot man. Whether these works or not I am much obliged.

dino September 8, 2010 at 4:19 pm

thx! dude..

Pema Marley October 16, 2010 at 11:38 pm

Hi buddies,

As the times goes along, my heartache with virus is now coming to an end and I no longer have the problem to deal with virus. The so called Newfolder.exe is still there in my pen drive whenever I use someone’s computer and the virus is clever enough to hide the original folder by giving it a system attributes and the duplicate with an *.exe extension is visible. But I have learned to deal with it and no longer annoys me.
a) Never open your pen drive directly as it executes certain virus on the fly.
b) Look for any suspicious process. Familiarize yourself with it.
c) Never click on the virus. Right click on the folder * Properties. If it is showing as “Application” delete it immediately or just leave it alone.

waseem akram November 30, 2010 at 10:38 pm

hi frnds iwas one prob occured its trojon hourse virus ithink “new folder” pls give me solution iwas download one software here but thats not working pl give me any solution beacuse my total system was not working properly thanx in advance…………………………………..

Yasir June 22, 2011 at 2:05 pm

waaaaooooooooooooooooooooo…. MOHAMMAD ABDULLAH tool is great it solved my problems

manjit September 19, 2011 at 1:54 am

i thing its not active in windows 7. however when ever a pendrive is pluged the folder gets duplicate. nod32 latest, kasperascy latest, macafe latest, avg all failed.. but got a good result from avast.

Roeun Rithea December 6, 2011 at 10:39 am

Thank you for give program for remove new folder exe.

vanguard15 December 10, 2011 at 4:59 pm

i’ve read from start till the end and my problem is that

a) I can’t find the new folder(1).exe in my computer
b) Whenever I connect my pendrive/ext. hard disk, the new folder(1).exe is there and after formating it or scanning or using all sorts of new folder.exe removal tool, it still remains there
c) In safe mode, I actually formated my pendrive/ext. hard disk and well it worked..until I restarted and went back to normal mode that it starts reappaearing again and again and again..
d) Inside the pendrive, it has new folder(1).exe and does not have schivost.exe
e) Task manager, registry editor, folder options, and run option from start menu are all OK and working.
f) The removal tool by Muhammad Abdullah is not working for me.
g) All autorun have been disabled a long time ago yet it still affects it after deleting

Any suggestions?….

praveen January 5, 2012 at 8:36 am

it is working atleast task manager now enable,, i dont check its side effect yet,, hope all thing going well

Ramesh January 20, 2012 at 6:24 pm

A folder(with parent folder name) is created inside the parent folder, I tried to delete it but again when i open any folder it is appearing in Windows 2003 server .Pls help me how to delete this virus with out any antivirus .

vijay February 12, 2012 at 5:15 pm

Hi..Brother.. Thanku so much for giving this wonderfull antivirus..
its really working..thank u once again..bye

Abdul Qayyum March 15, 2012 at 10:12 pm

Hi every one. any kind of virus can be remove with out any anti virus
in run. write cmd and then ok.
now if there any virus in D partition, you have to go to D by writing d: and then press enter
now write
attrib /d /s -h -r -s -a (press Enter)
all files and folder wchich are hidden, now it appear
now write
del a*.inf (press enter)
del *.exe (press enter)
del *.pif (press enter)
exit (press enter)
now open D partiion. press F3 and search *.exe
if there any kind of folder with exe extantion. delete it. in this way you can delete any kind of virus with out any antivires

Leave a Comment

Previous post:

Next post:

© TroubleFixers – All about fixing computer troubles2007-2016 . All Rights Reserved.