The BullGuard products and services are part of NortonLifeLock Inc., a global leader in consumer Cyber Safety with a portofolio of brands including Norton, Avira and more. Learn more at NortonLifeLock.com

Cool USEP scandal

Posted 7/14/2008 3:59 PM
#63601
User avatar

mbascug29 Member

Date Joined Nov 2016
Total Posts: 1
hi please help me how to remove the cool USEP scandal virus......plssssssssssss.
Posted 7/17/2008 2:41 PM
#63719
User avatar

germz Member

Date Joined Nov 2016
Total Posts: 4
I was also infected with this stupid virus. This is the solution:

1. Open "My Computer"

2. In the menu above, click Tools --> Folder Options --> File Types

3. Find VBS, click it and click delete. Find VBE, click it and click delete.

4. Now, click View tab. Tick "Show hidden files and folders"

5. Click apply and ok.

6. Now, go to your partitions (your drive c:\, d:\, e:\, etc.).

7. Open each drive. You should see COOL USEP SCANDAL.vbs in each drive. Click it and hit delete in your keyboard.

8. Don't forget to empty your recycle bin.

9. Open again your drives, you should see SOWAR.VBS and AUTORUN.INF. Delete these two and don't forget to empty recycle bin. If you can't see these two, restart you computer.

10. Now the next step is to download and install a program called HIJACKTHIS --> https://download.hijackthis.eu/HJTInstall.exe

11. Once installed, open it and click DO A SYSTEM SCAN ONLY.

12. In the end of each line, find and check these in their box:

a.) Long Live Sowar

b.) https://www.redtube.com (do not open, this is a porn site from that virus)

c.) DisableRegedit=1

d.) SysRes.vbs

e.) Control Panel Present


13. Check those boxes and click FIX CHECKED. Do a restart. That's all

bUgZz
Posted 7/18/2008 8:10 AM
#63762
User avatar

googles30 Member

Date Joined Nov 2016
Total Posts: 1
germz,

i followed every step of what you have posted except deleting the ."vbe", i somewhat overlooked it and it was successful removing the stupid virus.
thank you very much.
unfortunately when i am accessing my drive [c:], using via Start ---> My Computer ---> Drive C or even via My Computer ---> Drive C on the desktop, it gave this error message 'there is no script engine for the extension ".vbs".
what should be the problem and the next step to revive the usual doubleclick on drive c.
thank you very much again.

googles30
Posted 7/19/2008 3:11 AM
#63782
User avatar

germz Member

Date Joined Nov 2016
Total Posts: 4
Try this:

1. Click Start --> Run
2. Type: C: or D: or E: (depends on how many partitions you have) and hit enter/ok.
3. That's it.

gErMz
Posted 7/26/2008 1:35 AM
#63984
User avatar

jeffjeff18 Member

Date Joined Nov 2016
Total Posts: 3
Germz,

y cant i see SOWAR.VBS and AUTORUN.INF? though i have restarted my computer still cant find it.
please help me remove this tnx!!!
Posted 7/26/2008 5:44 PM
#64002
User avatar

bustedblues33 Member

Date Joined Nov 2016
Total Posts: 2
i also cant see sowar.vbs and autorun.inf even tough i restarted my laptop several times..but d cool usep scandal is no longer in my c: and e: drive..is that ok already?!?is my laptop free from that virus or i should find and delete the sowar.vbs and autorun.inf first?!?plssss answer my question...thanks!
Posted 7/26/2008 5:45 PM
#64003
User avatar

bustedblues33 Member

Date Joined Nov 2016
Total Posts: 2
i also cant see sowar.vbs and autorun.inf even tough i restarted my laptop several times..but d cool usep scandal is no longer in my c: and e: drive..is that ok already?!?is my laptop free from that virus or i should find and delete the sowar.vbs and autorun.inf first?!?plssss answer my question...thanks!
Posted 7/27/2008 11:00 AM
#64030
User avatar

germz Member

Date Joined Nov 2016
Total Posts: 4
For those who did not get it, please read and follow my instructions above. SOWAR.vbs and AUTORUN.inf are both hidden files. You need to untick "Show hidden files and folders" in My Computer (Tools --> Folder Options --> View). Read and read again my instructions. Peace bros.

Regards,

gErMz :)
Posted 7/29/2008 2:38 AM
#64090
User avatar

Jakk Member

Date Joined Nov 2016
Total Posts: 1
Hi Germz,

My pc is also infected with this virus and I tried to used your instruction but my pc is on the safemode, after rebooting I can't access all exe file, the error said that the extension file is missing. Can I still recover my pc or do I need to reformat it.. :cry: Please help me..

Thanks in advance..
Posted 7/29/2008 11:52 PM
#64119
User avatar

jeffjeff18 Member

Date Joined Nov 2016
Total Posts: 3
Germz,

To others who canntot see aut and sowar, do this,tool tab-folder options-view tab- un tick the "hide protected operating system".
thanks for the info i olready deleted the autorun.inf and sowr.vbs but still i cannot access my task manager?
is it just ok?
thanks!!
Posted 7/31/2008 11:07 AM
#64201
User avatar

dr.xaris Member

Date Joined Nov 2016
Total Posts: 1
hello there...im a newbie here...i already followed your instructions in removing the sowar
virus in my laptop and thanks to you it was successfully removed. the problem though is....when i click drive c:/drive d: this message appeared -> There is no script engine for file extension ".vbs". how can i access it again? hope you could write a quick reply. thanks vey much...really apperciate your big help!!!
Posted 7/31/2008 4:35 PM
#64215
User avatar

meglamour08 Member

Date Joined Nov 2016
Total Posts: 1
hi Germz,
i was able to do everything as stated in your post and have deleted the files. however, i also still cannot access my task manager. is there something that i should do so i could access the task manager again. thank you so much for your help...
Posted 8/1/2008 2:23 AM
#64228
User avatar

jeffjeff18 Member

Date Joined Nov 2016
Total Posts: 3
meglamour8,

Do this to enable your task manager again.

RUN then type gpedit.msc

That will open your group policy. Then click User configuration then ADMINISTRATIVE TEMPLATES then SYSTEM then CTRL+DEL+ALT OPTIONS then dISABLE the REMOVE TASK MANAGER.

Thats it and please dont mess around with other config that you dont understand there so be careful.
Posted 8/3/2008 2:19 PM
#64323
User avatar

germz Member

Date Joined Nov 2016
Total Posts: 4
"Somebody" wrote: meglamour8,

Do this to enable your task manager again.

RUN then type gpedit.msc

That will open your group policy. Then click User configuration then ADMINISTRATIVE TEMPLATES then SYSTEM then CTRL+DEL+ALT OPTIONS then dISABLE the REMOVE TASK MANAGER.

Thats it and please dont mess around with other config that you dont understand there so be careful.


That is correct! Very good man.

gErMz
Posted 8/5/2008 4:30 PM
#64404
User avatar

futzie Member

Date Joined Nov 2016
Total Posts: 2
please help me, im slightly computer illiterate.. i tried to follow the instructions on deleting the cool usep scandal virus but i cant seem to find the sowar and autorun no matter how many times i tried to restart my computer. i followed to the letter the instructions, especially to tick the show hidden files. i cant also open my drives bacause it says ther is no script engine for file extension ."vbs". i tried the suggestion to visit user configuration and disable remove task manager. please, please help me. i would forever be indebted to you..
Posted 8/6/2008 3:27 AM
#64413
User avatar

futzie Member

Date Joined Nov 2016
Total Posts: 2
pls, pls, pls help me.. im a little desperate. no matter how many times i restarted my laptop i cant find sowar and autorun. everytime i click tools -> folder options -> view -> tick show hidden files and folders, still nothing happens. i still cant see the sowar and autorun. is there any other solution? will it help and bring back my access to my c: and d: drives if i just reformat my laptop? thanks so much in advance.
Posted 8/13/2008 5:04 AM
#64654
User avatar

alexanderdiaz Member

Date Joined Nov 2016
Total Posts: 1
hello there...im a newbie here...i already followed your instructions in removing the sowar
virus in my desktop but it didn't work. from the folder options, file type and check all the boxes of:

a.) Long Live Sowar

b.) https://www.redtube.com (do not open, this is a porn site from that virus)

c.) DisableRegedit=1

d.) SysRes.vbs

e.) Control Panel Present

13. Check those boxes and click FIX CHECKED. Do a restart.

and everytime i click drive c:/drive d: this message appeared -> There is no script engine for file extension ".vbs". how can i access it again? hope you could write a quick reply. Please help me solve my problem. thank you very much...
Posted 8/15/2008 2:07 AM
#64806
User avatar

dashi Member

Date Joined Nov 2016
Total Posts: 1
hello germz!!!


thanks for the infor.. i tried to follow your instructions but when i've empty my recycle bin the cool USEP Scandal keep re-appearing on my partition drive. i tried several times but it's still the same...



please help me...





mare
Posted 8/17/2008 6:42 AM
#64992
User avatar

cyberXpert2008 Member

Date Joined Nov 2016
Total Posts: 2
:scool:


try my new "Cool USEP Scandal" remover



its really effective:



https://www.geocities.com/for2not2/cus_remover.zip
Posted 8/29/2008 4:39 AM
#65381
User avatar

cyberXpert2008 Member

Date Joined Nov 2016
Total Posts: 2
:smile: try my new Cool USEP Scandal Remover (version 1.1),
Click Here



its very effective!!!...
Posted 8/31/2008 4:32 PM
#65485
User avatar

nathanzosh Member

Date Joined Nov 2016
Total Posts: 1
it is very simple to remove that virus
1. press start
2. go to search
3. search "cool usep scandal"
4. delete it and don't forget to empty your recycle bin.... that's all
Posted 9/8/2008 12:36 AM
#65737
User avatar

rareRyan Member

Date Joined Nov 2016
Total Posts: 1
"cyberXpert2008" wrote: :smile: try my new Cool USEP Scandal Remover (version 1.1),
Click Here



its very effective!!!...





thanks bro... effective!
  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Tuesday, May 17, 2022, 6:26 AM (GMT +2)
There are a total of 61,972 posts in 13,696 threads.
In the last 3 days there were 0 new threads and 0 reply posts.

Who's online

This forum has 38,682 registered members. Please welcome our newest member, frosty.
479 Guest(s), 0 Registered Member(s) are currently online.