Cool USEP scandal - Free Antivirus Forum

Cool USEP scandal

BullGuard Antivirus Forum > Bullguard zone > BullGuard Trial users > Cool USEP scandal

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

mbascug29
New Member

Date Joined Jun 2008
Total Posts : 1

Posted 7-14-2008 5:59 (GMT +2)

hi please help me how to remove the cool USEP scandal virus......plssssssssssss.

germz
New Member

Date Joined Jun 2008
Total Posts : 4

Posted 7-17-2008 4:41 (GMT +2)

I was also infected with this stupid virus. This is the solution:

1. Open "My Computer"

2. In the menu above, click Tools --> Folder Options --> File Types

3. Find VBS, click it and click delete. Find VBE, click it and click delete.

4. Now, click View tab. Tick "Show hidden files and folders"

5. Click apply and ok.

6. Now, go to your partitions (your drive c:\, d:\, e:\, etc.).

7. Open each drive. You should see COOL USEP SCANDAL.vbs in each drive. Click it and hit delete in your keyboard.

8. Don't forget to empty your recycle bin.

9. Open again your drives, you should see SOWAR.VBS and AUTORUN.INF. Delete these two and don't forget to empty recycle bin. If you can't see these two, restart you computer.

10. Now the next step is to download and install a program called HIJACKTHIS --> http://download.hijackthis.eu/HJTInstall.exe

11. Once installed, open it and click DO A SYSTEM SCAN ONLY.

12. In the end of each line, find and check these in their box:

a.) Long Live Sowar

b.) http://www.redtube.com (do not open, this is a porn site from that virus)

c.) DisableRegedit=1

d.) SysRes.vbs

e.) Control Panel Present

13. Check those boxes and click FIX CHECKED. Do a restart. That's all

bUgZz

googles30
New Member

Date Joined Jun 2008
Total Posts : 1

Posted 7-18-2008 10:10 (GMT +2)

germz,

i followed every step of what you have posted except deleting the ."vbe", i somewhat overlooked it and it was successful removing the stupid virus.
thank you very much.
unfortunately when i am accessing my drive [c:], using via Start ---> My Computer ---> Drive C or even via My Computer ---> Drive C on the desktop, it gave this error message 'there is no script engine for the extension ".vbs".
what should be the problem and the next step to revive the usual doubleclick on drive c.
thank you very much again.

googles30

germz
New Member

Date Joined Jun 2008
Total Posts : 4

Posted 7-19-2008 5:11 (GMT +2)

Try this:

1. Click Start --> Run
2. Type: C: or D: or E: (depends on how many partitions you have) and hit enter/ok.
3. That's it.

gErMz

jeffjeff18
New Member

Date Joined Jun 2008
Total Posts : 4

Posted 7-26-2008 3:35 (GMT +2)

Germz,

y cant i see SOWAR.VBS and AUTORUN.INF? though i have restarted my computer still cant find it.
please help me remove this tnx!!!

bustedblues33
New Member

Date Joined Jun 2008
Total Posts : 2

Posted 7-26-2008 7:44 (GMT +2)

i also cant see sowar.vbs and autorun.inf even tough i restarted my laptop several times..but d cool usep scandal is no longer in my c: and e: drive..is that ok already?!?is my laptop free from that virus or i should find and delete the sowar.vbs and autorun.inf first?!?plssss answer my question...thanks!

bustedblues33
New Member

Date Joined Jun 2008
Total Posts : 2

Posted 7-26-2008 7:45 (GMT +2)

germz
New Member

Date Joined Jun 2008
Total Posts : 4

Posted 7-27-2008 1:00 (GMT +2)

For those who did not get it, please read and follow my instructions above. SOWAR.vbs and AUTORUN.inf are both hidden files. You need to untick "Show hidden files and folders" in My Computer (Tools --> Folder Options --> View). Read and read again my instructions. Peace bros.

Regards,

gErMz :)

Jakk
New Member

Date Joined Jun 2008
Total Posts : 1

Posted 7-29-2008 4:38 (GMT +2)

Hi Germz,

My pc is also infected with this virus and I tried to used your instruction but my pc is on the safemode, after rebooting I can't access all exe file, the error said that the extension file is missing. Can I still recover my pc or do I need to reformat it..

Please help me..

Thanks in advance..

jeffjeff18
New Member

Date Joined Jun 2008
Total Posts : 4

Posted 7-30-2008 1:52 (GMT +2)

Germz,

To others who canntot see aut and sowar, do this,tool tab-folder options-view tab- un tick the "hide protected operating system".
thanks for the info i olready deleted the autorun.inf and sowr.vbs but still i cannot access my task manager?
is it just ok?
thanks!!

dr.xaris
New Member

Date Joined Jun 2008
Total Posts : 1

Posted 7-31-2008 1:07 (GMT +2)

hello there...im a newbie here...i already followed your instructions in removing the sowar

virus in my laptop and thanks to you it was successfully removed. the problem though is....when i click drive c:/drive d: this message appeared -> There is no script engine for file extension ".vbs". how can i access it again? hope you could write a quick reply. thanks vey much...really apperciate your big help!!!

meglamour08
New Member

Date Joined Jun 2008
Total Posts : 1

Posted 7-31-2008 6:35 (GMT +2)

hi Germz,
i was able to do everything as stated in your post and have deleted the files. however, i also still cannot access my task manager. is there something that i should do so i could access the task manager again. thank you so much for your help...

jeffjeff18
New Member

Date Joined Jun 2008
Total Posts : 4

Posted 8-1-2008 4:23 (GMT +2)

meglamour8,

Do this to enable your task manager again.

RUN then type gpedit.msc

That will open your group policy. Then click User configuration then ADMINISTRATIVE TEMPLATES then SYSTEM then CTRL+DEL+ALT OPTIONS then dISABLE the REMOVE TASK MANAGER.

Thats it and please dont mess around with other config that you dont understand there so be careful.

germz
New Member

Date Joined Jun 2008
Total Posts : 4

Posted 8-3-2008 4:19 (GMT +2)

Somebody said...
meglamour8,

Do this to enable your task manager again.

RUN then type gpedit.msc

That will open your group policy. Then click User configuration then ADMINISTRATIVE TEMPLATES then SYSTEM then CTRL+DEL+ALT OPTIONS then dISABLE the REMOVE TASK MANAGER.

Thats it and please dont mess around with other config that you dont understand there so be careful.

That is correct! Very good man.

gErMz

futzie
New Member

Date Joined Aug 2008
Total Posts : 2

Posted 8-5-2008 6:30 (GMT +2)

please help me, im slightly computer illiterate.. i tried to follow the instructions on deleting the cool usep scandal virus but i cant seem to find the sowar and autorun no matter how many times i tried to restart my computer. i followed to the letter the instructions, especially to tick the show hidden files. i cant also open my drives bacause it says ther is no script engine for file extension ."vbs". i tried the suggestion to visit user configuration and disable remove task manager. please, please help me. i would forever be indebted to you..

futzie
New Member

Date Joined Aug 2008
Total Posts : 2

Posted 8-6-2008 5:27 (GMT +2)

pls, pls, pls help me.. im a little desperate. no matter how many times i restarted my laptop i cant find sowar and autorun. everytime i click tools -> folder options -> view -> tick show hidden files and folders, still nothing happens. i still cant see the sowar and autorun. is there any other solution? will it help and bring back my access to my c: and d: drives if i just reformat my laptop? thanks so much in advance.

alexanderdiaz
New Member

Date Joined Aug 2008
Total Posts : 1

Posted 8-13-2008 7:04 (GMT +2)

hello there...im a newbie here...i already followed your instructions in removing the sowar
virus in my desktop but it didn't work. from the folder options, file type and check all the boxes of:

a.) Long Live Sowar

b.) http://www.redtube.com (do not open, this is a porn site from that virus)

c.) DisableRegedit=1

d.) SysRes.vbs

e.) Control Panel Present

13. Check those boxes and click FIX CHECKED. Do a restart.

and everytime i click drive c:/drive d: this message appeared -> There is no script engine for file extension ".vbs". how can i access it again? hope you could write a quick reply. Please help me solve my problem. thank you very much...

dashi
New Member

Date Joined Aug 2008
Total Posts : 1

Posted 8-15-2008 4:07 (GMT +2)

hello germz!!!

thanks for the infor.. i tried to follow your instructions but when i've empty my recycle bin the cool USEP Scandal keep re-appearing on my partition drive. i tried several times but it's still the same...

please help me...

mare

cyberXpert2008
New Member

Date Joined Aug 2008
Total Posts : 2

Posted 8-17-2008 8:42 (GMT +2)

try my new "Cool USEP Scandal" remover

its really effective:

http://www.geocities.com/for2not2/cus_remover.zip

cyberXpert2008
New Member

Date Joined Aug 2008
Total Posts : 2

Posted 8-29-2008 6:39 (GMT +2)

try my new Cool USEP Scandal Remover (version 1.1),

Click Here

its very effective!!!...

nathanzosh
New Member

Date Joined Aug 2008
Total Posts : 1

Posted 8-31-2008 6:32 (GMT +2)

it is very simple to remove that virus
1. press start
2. go to search
3. search "cool usep scandal"
4. delete it and don't forget to empty your recycle bin.... that's all

rareRyan
New Member

Date Joined Sep 2008
Total Posts : 1

Posted 9-8-2008 2:36 (GMT +2)

cyberXpert2008 said...

try my new Cool USEP Scandal Remover (version 1.1),
Click Here

its very effective!!!...

thanks bro... effective!

Forum Information

Currently it is Tuesday, October 07, 2008 10:36 AM (GMT +2)
There are a total of 62.550 posts in 15.599 threads.
In the last 3 days there were 16 new threads and 52 reply posts. View Active Threads