Malwares
Closed
sidhu
-
Mar 1, 2009 at 08:43 AM
xpcman
xpcman
- Posts
- 19532
- Registration date
- Wednesday October 8, 2008
- Status
- Contributor
- Last seen
- June 15, 2019
Related:
- Malwares
- Malware defender - Download
- How to restore files hidden by viruses or malwares? - How-To - Security
- Facebook Adds Anti-Malware Option - News
- Malware Found on E-Cig Chargers? - News
- Malware to Blame for $80M Bank Heist - News
1 reply
xpcman
Mar 1, 2009 at 01:26 PM
- Posts
- 19532
- Registration date
- Wednesday October 8, 2008
- Status
- Contributor
- Last seen
- June 15, 2019
Mar 1, 2009 at 01:26 PM
Actually this is an automated script which is applied in your system. For removal of this please follow the following steps -
1. Open My Computer > Tools > Folder Options > View
2. In Advanced Settings select "Show hidden files and folders" and remove the checkmark from "Hide protected operating system file (Recommended)", Press OK for the warning message.
3. Open all system drives one by one (example C:, D; etc) and delete autorun.inf and any file with 'vbs' extension.
4. Delete the same vbs file from C:\Windows folder also.
5. In case you are unable to delete the vbs file then kill the wscript.exe process from task manager
6. Open Reg editor and navigate to Hkey_users > S-1-5-21-1244467668-1331586020-26564730-50773 > Software > Microsoft > Internet Explorer > Main
7. On the right pane dbl clk the Window Title and type "Microsoft Internet Explorer"
8. Exit registry editor
Good Luck - Please report success (or lack of success) back to this forum
1. Open My Computer > Tools > Folder Options > View
2. In Advanced Settings select "Show hidden files and folders" and remove the checkmark from "Hide protected operating system file (Recommended)", Press OK for the warning message.
3. Open all system drives one by one (example C:, D; etc) and delete autorun.inf and any file with 'vbs' extension.
4. Delete the same vbs file from C:\Windows folder also.
5. In case you are unable to delete the vbs file then kill the wscript.exe process from task manager
6. Open Reg editor and navigate to Hkey_users > S-1-5-21-1244467668-1331586020-26564730-50773 > Software > Microsoft > Internet Explorer > Main
7. On the right pane dbl clk the Window Title and type "Microsoft Internet Explorer"
8. Exit registry editor
Good Luck - Please report success (or lack of success) back to this forum
