Malwares
Closed
sidhu
-
Mar 1, 2009 at 08:43 AM
xpcman Posts 19530 Registration date Wednesday October 8, 2008 Status Contributor Last seen June 15, 2019 - Mar 1, 2009 at 01:26 PM
xpcman Posts 19530 Registration date Wednesday October 8, 2008 Status Contributor Last seen June 15, 2019 - Mar 1, 2009 at 01:26 PM
Related:
- Malwares
- Remove malwares from chrome - Guide
- How to remove malware on a computer with Google Chrome? - Guide
1 response
xpcman
Posts
19530
Registration date
Wednesday October 8, 2008
Status
Contributor
Last seen
June 15, 2019
1,826
Mar 1, 2009 at 01:26 PM
Mar 1, 2009 at 01:26 PM
Actually this is an automated script which is applied in your system. For removal of this please follow the following steps -
1. Open My Computer > Tools > Folder Options > View
2. In Advanced Settings select "Show hidden files and folders" and remove the checkmark from "Hide protected operating system file (Recommended)", Press OK for the warning message.
3. Open all system drives one by one (example C:, D; etc) and delete autorun.inf and any file with 'vbs' extension.
4. Delete the same vbs file from C:\Windows folder also.
5. In case you are unable to delete the vbs file then kill the wscript.exe process from task manager
6. Open Reg editor and navigate to Hkey_users > S-1-5-21-1244467668-1331586020-26564730-50773 > Software > Microsoft > Internet Explorer > Main
7. On the right pane dbl clk the Window Title and type "Microsoft Internet Explorer"
8. Exit registry editor
Good Luck - Please report success (or lack of success) back to this forum
1. Open My Computer > Tools > Folder Options > View
2. In Advanced Settings select "Show hidden files and folders" and remove the checkmark from "Hide protected operating system file (Recommended)", Press OK for the warning message.
3. Open all system drives one by one (example C:, D; etc) and delete autorun.inf and any file with 'vbs' extension.
4. Delete the same vbs file from C:\Windows folder also.
5. In case you are unable to delete the vbs file then kill the wscript.exe process from task manager
6. Open Reg editor and navigate to Hkey_users > S-1-5-21-1244467668-1331586020-26564730-50773 > Software > Microsoft > Internet Explorer > Main
7. On the right pane dbl clk the Window Title and type "Microsoft Internet Explorer"
8. Exit registry editor
Good Luck - Please report success (or lack of success) back to this forum
