Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update README.md #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update README.md #1

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 33 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,36 @@
S3L1M created a very useful program to help revert files captured by `ground.exe` virus. I got infected, amd noticed it fairly quickly when I noticed `ground.exe` running in task manager. I would like to create this updated readme with more detailed instructions for using Ground-Damage-Fixer. Of course, you already have `Ground` stopped and are stuck with this messy aftermath. I included how I removed `Ground.exe` below in case you came across this page while still searching for a way to remove the virus.
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What you wrote here should be in the description of pull request not in the readme itself


The command to manualy unhide and retsore permissions to a file/folder is
```
attrib -H -S *.exe /S /D
```

1) Run `Super Unhider`
2) Click on `Add Files`
2) search for files with `size:534,016`
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You search for size:534,016 type:exe instead.

![Alt Text](https://github.com/bizzar721/Ground-Damage-Fixer/blob/master/1111.png)
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Images should be stored in a folder called for example "Screenshots" and should be subimtted with your pull request. So that, you can write it as ![Alt Text](Screenshots/1.png)

3 )After search is complete, use `CTRL-A` to select all, then `CTRL-X` to cut (Icons should all now be transparent)
![Alt Text](https://github.com/bizzar721/Ground-Damage-Fixer/blob/master/2222.png)
4) Click `Open`
5) Open `Recycle Bin`, then `CTRL-V` to paste the infected `.exe`s
![Alt Text](https://github.com/bizzar721/Ground-Damage-Fixer/blob/master/3333.png)
6) Click on the top entry in `Super Unhider` and click `Unhide` (runs from selected downward)
7) Give it a minute to finish, then select the top entry again and click `Rename`

All files should now be restored.

# Removing Ground.exe
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You should start by removing the Ground.exe first before using my program

* I recomend having Malwarebytes Anti-malware installed (free)
* Boot into `Safe Mode` . This can be done by typing `msconfig` in the search bar.
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I create that program 7 years ago. So, I don't remember all the details of what I did baack then. It is better to remove the program for the startup program list (using any utility or manaually by regedit) after removing the virus itself.

* Select `boot` tab and select `Safe boot`
* After restarting in safe mode, go into your start menu and delete `ground.exe` from your `start up` folder
* Go to `%appdata%/Roaming` and remove `ground.exe`
* Run `msconfig` and uncheck safemode (but do not restart yet)
* For safe measure, run Malwarebytes Anti-malware, then reboot



ORIGINAL README by S3L1M
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

My original description should be removed or modified except the video part.

# Ground-Damage-Fixer
Ground virus leaves infected undetectable files with ugly icons, this program uses simple command to remove it and restore orignal files.
you can find the program in Executable folder
Expand Down