1. Go to Start > Run and type: cmd and press press Ok.
2. You may need to change the directory to root of C:, type: cd \, then press Enter
3. Type: attrib -s -h -r -a autorun.inf, , then press Enter
4. Type: dir, , then press Enter. This will display if Autorun file is present.
5. Type: del autorun.inf, , then press Enter
6. Search for and remove sowar.vbs, SysRes.vbs, Cool USEP Scandal.vbs
7. You may need to change the directory to root of C:, type: cd \, then press Enter
8. Type: attrib sowar.vbs.* -s -h -r -a, then press Enter
9. Type: dir /s sowar.vbs, then press Enter
10. If the file is present, type: del sowar.vbs, then press Enter
11. Repeat the above commands for each drive on your computer including your flash/usb drive.
12. Repeat these instructions to search for and delete SysRes.vbs, Cool USEP Scandal.vbs on each drive if present.
13. Exit the command prompt by typing “exit†and reboot your computer.
any Flash drives (USB pendrives) may be infected also.