6. Now, go to your partitions (your drive c:\, d:\, e:\, etc.).
7. Open each drive. You should see COOL USEP SCANDAL.vbs in each drive. Click it and hit delete in your keyboard.
8. Don't forget to empty your recycle bin.
9. Open again your drives, you should see SOWAR.VBS and AUTORUN.INF. Delete these two and don't forget to empty recycle bin. If you can't see these two, restart you computer.
10. Now the next step is to download and install a program called HIJACKTHIS --> http://download.hijackthis.eu/HJTInstall.exe
11. Once installed, open it and click DO A SYSTEM SCAN ONLY.
12. In the end of each line, find and check these in their box:
a.) Long Live Sowar
b.) http://www.redtube.com (do not open, this is a porn site from that virus)
c.) DisableRegedit=1
d.) SysRes.vbs
e.) Control Panel Present
13. Check those boxes and click FIX CHECKED. Do a restart. That's all
i followed every step of what you have posted except deleting the ."vbe", i somewhat overlooked it and it was successful removing the stupid virus. thank you very much. unfortunately when i am accessing my drive [c:], using via Start ---> My Computer ---> Drive C or even via My Computer ---> Drive C on the desktop, it gave this error message 'there is no script engine for the extension ".vbs". what should be the problem and the next step to revive the usual doubleclick on drive c. thank you very much again.
i also cant see sowar.vbs and autorun.inf even tough i restarted my laptop several times..but d cool usep scandal is no longer in my c: and e: drive..is that ok already?!?is my laptop free from that virus or i should find and delete the sowar.vbs and autorun.inf first?!?plssss answer my question...thanks!
i also cant see sowar.vbs and autorun.inf even tough i restarted my laptop several times..but d cool usep scandal is no longer in my c: and e: drive..is that ok already?!?is my laptop free from that virus or i should find and delete the sowar.vbs and autorun.inf first?!?plssss answer my question...thanks!
For those who did not get it, please read and follow my instructions above. SOWAR.vbs and AUTORUN.inf are both hidden files. You need to untick "Show hidden files and folders" in My Computer (Tools --> Folder Options --> View). Read and read again my instructions. Peace bros.
My pc is also infected with this virus and I tried to used your instruction but my pc is on the safemode, after rebooting I can't access all exe file, the error said that the extension file is missing. Can I still recover my pc or do I need to reformat it.. Please help me..
To others who canntot see aut and sowar, do this,tool tab-folder options-view tab- un tick the "hide protected operating system". thanks for the info i olready deleted the autorun.inf and sowr.vbs but still i cannot access my task manager? is it just ok? thanks!!
hello there...im a newbie here...i already followed your instructions in removing the sowar
virus in my laptop and thanks to you it was successfully removed. the problem though is....when i click drive c:/drive d: this message appeared -> There is no script engine for file extension ".vbs". how can i access it again? hope you could write a quick reply. thanks vey much...really apperciate your big help!!!
hi Germz, i was able to do everything as stated in your post and have deleted the files. however, i also still cannot access my task manager. is there something that i should do so i could access the task manager again. thank you so much for your help...
That will open your group policy. Then click User configuration then ADMINISTRATIVE TEMPLATES then SYSTEM then CTRL+DEL+ALT OPTIONS then dISABLE the REMOVE TASK MANAGER.
Thats it and please dont mess around with other config that you dont understand there so be careful.
That will open your group policy. Then click User configuration then ADMINISTRATIVE TEMPLATES then SYSTEM then CTRL+DEL+ALT OPTIONS then dISABLE the REMOVE TASK MANAGER.
Thats it and please dont mess around with other config that you dont understand there so be careful.
please help me, im slightly computer illiterate.. i tried to follow the instructions on deleting the cool usep scandal virus but i cant seem to find the sowar and autorun no matter how many times i tried to restart my computer. i followed to the letter the instructions, especially to tick the show hidden files. i cant also open my drives bacause it says ther is no script engine for file extension ."vbs". i tried the suggestion to visit user configuration and disable remove task manager. please, please help me. i would forever be indebted to you..
pls, pls, pls help me.. im a little desperate. no matter how many times i restarted my laptop i cant find sowar and autorun. everytime i click tools -> folder options -> view -> tick show hidden files and folders, still nothing happens. i still cant see the sowar and autorun. is there any other solution? will it help and bring back my access to my c: and d: drives if i just reformat my laptop? thanks so much in advance.
hello there...im a newbie here...i already followed your instructions in removing the sowar virus in my desktop but it didn't work. from the folder options, file type and check all the boxes of:
a.) Long Live Sowar
b.) http://www.redtube.com (do not open, this is a porn site from that virus)
c.) DisableRegedit=1
d.) SysRes.vbs
e.) Control Panel Present
13. Check those boxes and click FIX CHECKED. Do a restart.
and everytime i click drive c:/drive d: this message appeared -> There is no script engine for file extension ".vbs". how can i access it again? hope you could write a quick reply. Please help me solve my problem. thank you very much...
thanks for the infor.. i tried to follow your instructions but when i've empty my recycle bin the cool USEP Scandal keep re-appearing on my partition drive. i tried several times but it's still the same...
it is very simple to remove that virus 1. press start 2. go to search 3. search "cool usep scandal" 4. delete it and don't forget to empty your recycle bin.... that's all
Currently it is Thursday, November 20, 2008 7:01 PM (GMT +1) There are a total of 63.937 posts in 15.821 threads. In the last 3 days there were 32 new threads and 158 reply posts. View Active Threads
Who's Online
This forum has 27177 registered members. Please welcome our newest member, fillon. 53 Guest(s), 1 Registered Member(s) are currently online. Details digi
Please help me..
try my new Cool USEP Scandal Remover (version 1.1),
try my new Cool USEP Scandal Remover (version 1.1), 
|