I tried to follow this instruction from a similar forum, but it didn't help me any...
I was also infected with this stupid virus. This is the solution:
1. Open "My Computer"
2. In the menu above, click Tools --> Folder Options --> File Types
3. Find VBS, click it and click delete. Find VBE, click it and click delete.
4. Now, click View tab. Tick "Show hidden files and folders"
5. Click apply and ok.
6. Now, go to your partitions (your drive c:\, d:\, e:\, etc.).
7. Open each drive. You should see COOL USEP SCANDAL.vbs in each drive. Click it and hit delete in your keyboard.
8. Don't forget to empty your recycle bin.
9. Open again your drives, you should see SOWAR.VBS and AUTORUN.INF. Delete these two and don't forget to empty recycle bin. If you can't see these two, restart you computer.
10. Now the next step is to download and install a program called HIJACKTHIS -->
http://download.hijackthis.eu/HJTInstall.exe
11. Once installed, open it and click DO A SYSTEM SCAN ONLY.
12. In the end of each line, find and check these in their box:
a.) Long Live Sowar
b.)
http://www.redtube.com (do not open, this is a porn site from that virus)
c.) DisableRegedit=1
d.) SysRes.vbs
e.) Control Panel Present
13. Check those boxes and click FIX CHECKED. Do a restart. That's all
bUgZz
The step in no. 9? i couldn't find that file sowar and autorun.inf, even when i tried showing hidden files and folders.... so i skipped it, and went on to the next step... but now, everytime i try to open drive c: and d: a message appears saying: There is no script for file extension ".vbs"...
What am i supposed to do now? please help...
Linear Mode
