System infected from Surabaya virus

[KAILEY]

I keep getting the below message when Windows starts booting:

Surabaya in my birthday
Don't kill me, I'm just send message from your computer
Terima kasih telah menemaniku walaupun hanya sesaat, tapi bagiku sangat berarti
Maafkan jika kebahagiaan yang kuminta adalah teman sepanjang hidupku
Seharusnya aku mengerti bahwa keberadaanku bukanlah disisimu, hanyalah lamunan dalam sesal
Untuk kekasih yang tak kan pernah kumiliki 3r1k1m0

I am unable to access my hidden folder since they are having .scr extension. When I try to open any folder it shows Test or Configure rather than Open. After googling I found that it is some kind of Surabaya virus. I don't know what to do and how to get rid of it. How do I remove Surabaya virus from my computer?

[Snake08]

First make sure your antivirus software is up-to-date and running. Now turn off System Restore and boot in safe mode. Now scan your computer and remove the virus. Now boot your as normal and recheck if it reappears. However if this doesn't solve the problem then you need to do a system repair to fix the virus issue.

[Kirt]

Delete autorun.info from your infected drive by going to Start, Run, cmd. On command prompt that appears, type

attrib autorun.inf -s -h -r press Enter

DEL autorun.inf

Now go to your Registry Editor by clicking on Start, Run and regedit. Look for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\WinLogon. You should see “LegalNoticeCaption” & “LegalNoticeText” on the right side windows. This shows it is fine. To see hidden files, again go to Registry Editor and look for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL . Modify its CheckedValue from "0" to "1".

[KAILEY]

Thanks for the information but I tried to do the Windows registry trick for hidden files but it didn't worked. I will try for the rest of things and see what happens.