Today, I found some odd files on my desktop with .ini extension. And in other folders, there are also many .ini files. I don’t want them to be there. It’s so untidy. My anti-virus program has shown that I have gotten Desktop.ini Trojan Virus and I did everything to get rid of the annoyance without success. After checking my computer, I find that my computer running with lots of unknown programs and I have to surf the internet with slow speed. And I really get crazy about the Backdoor.0Access Virus which messes up my computer and I don’t even know what I did to get the tiresome. How do I remove them to the recycle bin?

Desktop.ini Trojan Virus Description

Desktop.ini  is a new released root-kit virus that has been infecting many computers recently. It is so stubborn that user was unable to clean the infection as you can see. This Trojan virus will add many .ini extension files on your desktop and in your folders. They will smear your desktop and other folders. Once your computer was infected with Desktop.ini virus, then your anti-virus AVAST keeps on popping up stating “Threat detected!”, you cant see any of the entries to remove Trojan dropper but your PC is definitely infected. Yes, it is because the virus mutates every time then when users are trying to remove it only with no luck. All the instructions they see state look in extensions. They do not see anything in extensions. Many of them recently downloaded Torrent or movies and read that may be where they got it from. What is worse, users got the nasty search engine virus except this problem and while they removed it from their homepage, programs, internet options and computer it still shows up when they type an incorrect HTTP address. So they want to know every time i start my computer i get the error message “Desktop.ini was detected”. How can i fix it? Well, since the anti-virus program just pick it up but couldn’t delete it completely, you must find an efficient way to save your computer well. Luckily, you can get rid of Desktop.ini virus from your machine with the tutorial here.

To save your computer, live chat with YooSecurity experts now, or you can follow the manual removal guide below to get your problem fixed. (For advanced computer users)

What the best solution to eliminate Desktop.ini virus if my anti-virus didn’t work?

Having trouble with Desktop.ini virus for it can’t be deleted by the anti-virus program? Once of the victims said:”unfortunately I seem to be the victim of Desktop.ini. I’ve tried a number of different anti-virus/malware programs to get rid of this thing, but I can’t seem to get rid of it. I am thinking I need to go in and remove the infection myself, but I’m not exactly what you would call “computer savvy.” Think you can help me with this? If your computer is infected with Desktop.ini. You kept warning not only in normal mode but in safe mode and running windows 7 and have run anti-virus software. It seems Avast quarantined the Trojan but cannot get rid of it . You can not do anything to remove the virus as you were stuck. Many users are so frustrated with this virus. Luckily they can fix the problem with guide here. Manual removal of Desktop.ini. Virus step by step guide is below.

Best Way to Remove Desktop.ini Trojan Horse Step by Step:

Firstly, please restart your computer and get in safe mode with networking:

Please follow these steps to get rid of Desktop.ini virus manually:
Step 1: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC. Open the Windows Task Manager.
If that didn’t work, try another way. Press the Start button and click on the Run option. This will start the Run tool. Type in task-mgr and press OK. This should start the Windows Task Manager

Step 2: Within the Windows Task Manager click on the Processes tab. Find the process by name. random.exe related to Desktop.ini. Then scroll the list to find required process. Select it with your mouse or keyboard and click on the End Process button. This will kill the process.

Video Show You on How to Modify or Change Windows Registry:

Step3: Remove malicious files of Desktop.ini virus

C:\windows\system32\services.exe
C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
C:\Windows\Installer\{bbee3ba2-89af-930c-bb78-1fb4e17db3cc}

Step4: Delete malicious registry entries of Desktop.ini virus.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer
“EnableShellExecuteHooks”= 1 (0x1)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe

As what you can see, Desktop.ini is really a very horrible virus which can finally destroy your computer system. And please don’t consider auto delete method since there is no such anti-virus can really remove Desktop.ini completely. Don’t download free software to take a chance. This can only waste your time and bring in much more viruses. All the instructions above are prepared for those who have much computer knowledge and are familiar with this kind for virus. Before you start to do the removal work, please consider it seriously. On the other hand, all the instructions above is aim at the common infection situation. As for Desktop.ini, there are many variables according to different computers. What’s worse, as time goes by, Desktop.ini may start its variation. Just like what is mentioned above, this virus infection is a cascaded infection. The related files may be changed. Unless you have much knowledge about this virus, it’s very hard for you to do the removal work.

Note:If you failed to remove this virus with the method above, please consult YooSecurity certified professionals to remove it completely.

Published by Tony Shepherd & last updated on October 22, 2013 7:57 am

Leave a Reply