Folders suddenly with .exe

[godwhacker]

---

Mga bro, inig taud nako sa memory stick dili dayon mogawas ang contents. It will take sometime. Inig gawas ang mga folders duna nay .exe nga extension. Unsa may tambal ini nga virus mga bro?

[coco_psy-co]

vbs virus na cya..i think naa n pud nag post ani...

try no kung maremember pa nko kung unsaon pagtanggal..nagsearch lang man gud ko ato sa net ug sol'n..post nko later...

[godwhacker]

^^^ cg bro. thanks daan. one question bro, motakud ba ni sa PC nga gikan man ni USB?

[junmar4]

^^^ cg bro. thanks daan. one question bro, motakud ba ni sa PC nga gikan man ni USB?

Takud molang. Try running combofix.

[coco_psy-co]

takod kaau..basaha ako post [info lang ni..how to avoid virus] nkta n nko to ako gi ingon.. i try lng kung maremove ba..wait lng ky itype pa nko..

[coco_psy-co]

1 CRTL-ALT-DEL for task manager..
2 kung mudisplay ang task manager has been disabled, effect na sa virus pro yaw balaka.
3 download ccleaner, kylangan au ni..
4 run ccleaner ad2 sa Tools na tab, daun sa Start Up na tab.
5 kung naa ka makita na mga script files or autome (wsript yata 2) basta kana naa script na word i-erase daun, pati mga vbs na i-erase pud.
6 adto dri..http://www.interstraits.biz/virusms32.htm
sunda ang mga instructions
7 download noobkiller..i-run tanan killer..sa advance i-type ang auto.vbs daun ok, pati sysres.vbs ug sowar.vbs..ipaiwit lang tong killer na kelangan mag restart
8 restart

try daw ni..post back sa result

[coco_psy-co]

kung naa ka pangutana, post lang bro..

[godwhacker]

1 CRTL-ALT-DEL for task manager..
2 kung mudisplay ang task manager has been disabled, effect na sa virus pro yaw balaka.
3 download ccleaner, kylangan au ni..
4 run ccleaner ad2 sa Tools na tab, daun sa Start Up na tab.
5 kung naa ka makita na mga script files or autome (wsript yata 2) basta kana naa script na word i-erase daun, pati mga vbs na i-erase pud.
6 adto dri..http://www.interstraits.biz/virusms32.htm
sunda ang mga instructions
7 download noobkiller..i-run tanan killer..sa advance i-type ang auto.vbs daun ok, pati sysres.vbs ug sowar.vbs..ipaiwit lang tong killer na kelangan mag restart
8 restart

try daw ni..post back sa result

Bro akong sulayan... I will come back to you.

[coco_psy-co]

try pud ni sa no. 6 na instruction.

1. Go to Start > Run and type: cmd and press press Ok.
2. You may need to change the directory to root of C:, type: cd \, then press Enter
3. Type: attrib -s -h -r -a autorun.inf, , then press Enter
4. Type: dir, , then press Enter. This will display if Autorun file is present.
5. Type: del autorun.inf, , then press Enter
6. Search for and remove sowar.vbs, SysRes.vbs, Cool USEP Scandal.vbs
7. You may need to change the directory to root of C:, type: cd \, then press Enter
8. Type: attrib sowar.vbs.* -s -h -r -a, then press Enter
9. Type: dir /s sowar.vbs, then press Enter
10. If the file is present, type: del sowar.vbs, then press Enter
11. Repeat the above commands for each drive on your computer including your flash/usb drive.
12. Repeat these instructions to search for and delete SysRes.vbs, Cool USEP Scandal.vbs on each drive if present.
13. Exit the command prompt by typing “exit” and reboot your computer.

[godwhacker]

^^^. Tried all what you intructed. You really rock!. Okay na bro. Iyang gi hide ang original folders and then nagcopy siya ug bag-o nga folder with .exe extension. Ako nalang gi manually delete bro ang mga redudant files nga iyang gi create. Now everything seems okay. Daghang salamat bro. Your hacker head is a big help to the community here.