HELP Urgently NEEDED: TTMS1117.dll.vbs

[iskoLares]

---

ei guys good day!

have a problem here..

my drives got infected with this VBS file from my sister's USB drive..

actually it would not have happened if i had the antivirus installed before opening it... sadly i didnt..


now, [i think it has the same symptoms with the airkelyu?]

symptoms
- cant open drive [will only open if Explore]
- regedit disabled
- taskmgr disabled [as i was going to kill the process]

- i have manually deleted the file but it seems that it is still there because when i try to open the drives NORTON will prompt about that file

- also the "FOLDER VIEW options in Windows Explorer" [to show hidden files] also disabled..


ANY OF YOU GUYS has an"EFFECTIVE solution to this?!...



I badly badly badly need a solution... please help ... any help would be appreciated...

[iskoLares]

ok i think i have deleted the FILE [ i think! ]

- task manager is on now
- folder options on
- regedit is ok

though i havent restarted the system to check if it will just revert back..


my problem now is that when i clik on "OPEN" on the drives ..

im getting an error that TTMS1117.dll.vbs can't be found... so it seems that the VBscript was able to edit some registry settings in opening the drive or another way to change the config for it... not sure though..


anybody?!...

[vladmire]

reformat or run kaspersky antivirus

[jemmanf]

delete the hidden file autorun.inf on each drive..

pm me if still got problems with this... i have manually removed this virus...

[iskoLares]

reformat or run kaspersky antivirus

is that the best solution there is?!

delete the hidden file autorun.inf on each drive..

pm me if still got problems with this... i have manually removed this virus...

will try to look for the autorun.inf bro..

[vladmire]

is that the best solution there is?!

nope, unless you know what you're doing. this is almost the same w/ taga-lipa virus. you can manually delete the file or run antivirus or in worst cases reformat your HDD.

[iskoLares]

nope, unless you know what you're doing. this is almost the same w/ taga-lipa virus. you can manually delete the file or run antivirus or in worst cases reformat your HDD.

the fact that i am asking for help means that "im having trouble in what to do next" ..

that is why im asking help for the best possible solution there is.. and hopefully.. reformating my HDD is not..

[jayr168]

bro,

just a hint incase you forget, show hidden and system file under folder options, most likely sa autorun.inf will be on the root directory of each infected drive and it is a Hidden file

Thanks

[jemmanf]

will help you bro.. just post or pm after deleting file...

then do open task Man then end task explorer.exe then run it again. check if autorun.inf is recreated or not...

[iskoLares]

will try it on my day off...