Question about Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC

3 Answers

Virus infecting microsoft programs

I have a friend whose laptop was infected by a virus of which she cannot remove. I'm yet to ask her antivirus though. Based on her, it was a ".scr file extension". it was said that ALL OF HER DOCUMENT FILES WERE REPLACED BY THE .SCR FILE EXTENSION.

what is the best way of solving this problem? is it really a virus? she said that she cannot use or open her documents anymore because of what just happened.

really need help on this, thank you!

Posted by on

  • second2dlast
    second2dlast Feb 03, 2008

    thank you so much! I'll suggest these solutions right away! I'll ask her too for further details.

  • rajeshwaran1 Apr 16, 2009

    it was a ".scr file extension". it was said that ALL OF DOCUMENT FILES WERE REPLACED BY THE .SCR FILE EXTENSION.

    what is the best way of solving this problem?

×

3 Answers

  • Level 1:

    An expert who has achieved level 1.

    MVP:

    An expert that got 5 achievements.

    Scholar:

    An expert who has written 20 answers of more than 400 characters.

    Hot-Shot:

    An expert who has answered 20 questions.

  • Contributor
  • 27 Answers

Its the W32/Rungbu-A virus, it infects Microsoft Word DOC files by copying itself to the same filename but with an .SCR extension, appending the DOC file to the SCR copy, and then hiding the original DOC file.

The W32/Rungbu-A then sets the computer not to show hidden files (in order to hide the DOC file), to give SCR files a Word icon (so the SCR file looks like a Word file), and to hide file extensions (so the SCR file just displays the filename, not the SCR extension). When the SCR file is run, the Word document is displayed as normal.

To recover your .DOC files just follow these steps:

You have to delete all files detected as W32/Rungbu-A.

Set the following registry entries in order to show extensions and hidden files:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HideFileExt
0


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt
UncheckedValue
0

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ShowSuperHidden
1


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden
UncheckedValue
1


You must change the attributes of the original .DOC files to stop them being hidden.

My answer to your second question, is in November of 2007 the .SCR file extension started to be used to transmit a Trojan. As a script or a screen saver this file can execute other files which carry the Trojan. The SCR file may be embedded within a ZIP file which could also contain a file with a double extension. Many Windows screen savers come with a .SCR extension by default. Usually these will be found in the Windows main directory. Use caution if you receive a screen saver file via E-mail. These files can contain executable code and can be worms or viruses. Note: This file type can become infected and should be carefully scanned if someone sends you a file with this extension.

Posted on Sep 10, 2008

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that got 5 achievements.

    Governor:

    An expert whose answer got voted for 20 times.

    Hot-Shot:

    An expert who has answered 20 questions.

  • Expert
  • 43 Answers

It does not sound like a Virus.
Is she able to Open her docs. using another extension.
If she has a antivirus prog. update prog. Disconnect from Internet,disable System Restore,run virus scan.
Delete any viruses found.
Reboot
Enable System Restore.
lets know how you went.

Posted on Feb 03, 2008

  • Level 3:

    An expert who has achieved level 3 by getting 1000 points

    All-Star:

    An expert that got 10 achievements.

    MVP:

    An expert that got 5 achievements.

    Vice President:

    An expert whose answer got voted for 100 times.

  • Master
  • 407 Answers

The laptop is infected by a trojan.it genarally comes when you download screensaver online.install a good antivirus like latest version macafee.the AVG free edition also a good one.

Posted on Feb 03, 2008

1 Suggested Answer

6ya6ya
  • 2 Answers

SOURCE: I have freestanding Series 8 dishwasher. Lately during the filling cycle water hammer is occurring. How can this be resolved

Hi,
a 6ya expert can help you resolve that issue over the phone in a minute or two.
best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
the service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
goodluck!

Posted on Jan 02, 2017

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

How can i remove virus


Removing viruses, though technical, is yet a very simple process if all the required steps are properly followed.
The basic steps are:
  • Buy or download a reliable antivirus software
  • Install the antivirus software
  • Update antivirus software with the latest virus definitions
  • Perform a complete system scan
Install an Antivirus Program in the System What is Antivirus program? An antivirus is a program that searches for, identifies and removes potential viruses existing in the computer system.
Antivirus software: Some of the most commonly and reliable antivirus programs available in the market are -
  • Symantec Norton antivirus
  • AVG antivirus
  • McAfee Scan
  • Microsoft Antivirus
The antivirus software should be updated regularly to retain its effectiveness.
Before installing the antivirus, close all open applications and terminate any suspicious processes using Task Manager. Sometimes, you may need to boot into safe mode or safe mode with command prompt to delete suspicious programs and references to them in the Windows Registry (run regedit from the command prompt to open the registry editor).
Search engines are excellent tools to find out whether a certain process is harmful or not. You can also get steps on how to remove a specific virus manually.
Removing the virus beforehand might be necessary, as some viruses will not allow an antivirus to operate. However, if you are not successful, you may still continue with the installation.

Scan the System to Identify and Locate the Virus Usually, the antivirus will run automatically when the system reboots after the installation. Therefore, it might identify the virus automatically. Moreover, you may want to run a quick system scan to locate the virus.
Troubleshooting the Virus Infected Areas After the antivirus identifies the infected areas, the next step is to rectify those areas.
Methods of Eliminating Viruses
Generally, the antivirus adopts one of two methods to eliminate the virus:
  • Removing the virus - When the virus can be easily identified and can be removed without affecting other files, then the antivirus removes it from the host place.
  • Quarantine - his is done when the virus cannot be easily identified removed from the file and the removal of virus means the removal of the complete file. In this method, although the virus is not eliminated, it is rendered inactive by moving the file into "quarantine" and renaming it.
Perform a Full System Scan Even after the virus is removed from the system, the next step is to scan the whole system to ensure that no infected files remain.

Aug 17, 2011 | Computers & Internet

Tip

How To Remove A Virus From Your Computer


Requirements: On an uninfected PC connected to the Internet, download the following programs to a thumbdrive. We will need this to fix the infected computer.
Instructions:
  1. Shut down the computer as soon as you realize there is a problem. Pop-ups, program errors, dll errors, fake Anti-Virus scanners, and similar are signs there is a problem. Shut down the computer normally, or hold the power button in until the computer shuts off.
  2. Power on the computer, and hit F8 before the Windows Startup screen appears. Select Safe Mode.
  3. Login if asked to, if not select Yes to continue.
  4. Click on the Start menu, select Run, type msconfig and press Ok, or type msconfig into the Start menu search box and press Enter.
  5. Under the General tab, select Diagnostic Startup. Press Apply.
  6. Under the Services tab, check the Hide All Microsoft Services box, and uncheck any services you don't recognize in the window.
  7. Under the Startup tab, select Disable All. Press Apply and Ok.
  8. Don't restart the computer yet.
  9. The System Restore Utility backs up selected files automatically to the Restore folder. Quite often are infected files stored there as backup files, and many Virus Scanners are unable to delete these files. If you suspect your computer may be infected, it is recommended that you disable the System Restore Utility to remove the infected files from the Restore folder.Select your OS for directions on how to disable the System Restore Utility - XP, Vista, 7
  10. While in Safe Mode, insert your USB thumbdrive and open it in My Computer.
  11. Open Combofix.exe, select Ok when it asks. Let Combofix scan and remove any infections it finds. It should restart the computer when it is done. When it restarts, boot up into Windows normally.
  12. Login if asked to, open your thumbdrive in My Computer again, and run Combofix.exe once more.
  13. Open up SmitFraudFix.exe from your thumbdrive. Press any key to continue when asked. Type 2, and press enter. When the scan is complete, restart your computer.
  14. If you had a fake Anti-Virus Scanner infection, open up Remove Fake Antivirus.exe from your thumbdrive. Press Start, and press Yes. When the scan and removal is Complete, restart the computer again.
  15. Install Microsoft Security Essentials, or your choice of Anti-Virus Software when the computer returns back to the desktop.
  16. Restart if asked to, and when the computer restarts, run a Full Scan in Microsoft Security Essentials.

on Feb 25, 2011 | Computers & Internet

Tip

Virus Removal


Normal 0 false false false MicrosoftInternetExplorer4 /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman"; mso-ansi-language:#0400; mso-fareast-language:#0400; mso-bidi-language:#0400;}Any malicious program such as virus, wormor Trojan horse can infect your computer system by affecting its performance.These program codes can cause several unexpected changes in your computersystem ranging from slow system performance to a severe system crash. How toidentify whether your computer system is infected with a virus attack?
Signof Virus infection
You can easily identify when yourcomputer system gets infected from viruses. Some of the signs of virusinfections are enlisted herewith:
Computerbecomes very slow in performance.
Suddensystem crashes and computer reboots repeatedly.
Applicationsoftware crashes and random messages are displayed on the monitor.
If you find any of the above mentionedsign on your computer system, then there arises the probability of yourcomputer being infected with viruses. The next step after detecting thepresence of virus on your PC is to remove them from your system in order tosave your important data. If your computer is not infected with any type ofmalicious software then it is strongly recommended to install any bestantivirus software to keep it safe against the attacks.
You can use antivirus software for removingviruses from your computer system. Antivirus software programs are intended forpreventing, detecting and removing virus programs. You can choose from some ofthe best antivirus software like Norton, Avast, AVG and others, provided it hasthe feature of regular update. In case your antivirus software is notup-to-date, then it will not be able to protect your computer system from themost recent viruses and other infections.
System Restore is an element of Windowsoperating system which enables you to roll back system files, registry keys,and installed programs to a previous stable state. Operating system of yourcomputer system creates restore point after installation of any software, orafter 24 hours.
If there is a virus is available on yoursystem at the time of creating the restore point, ittwill also become a part ofit. Antivirus software is incapable to remove any virus program from systemrestore. in such case, you have to disable System Restore and then scan withlatest antivirus software. After that, when your system gets disinfected fromviruses, then re-enable System Restore.
So, you have to install updated antivirussoftware on your computer system, if you want to keep it safe from anymalicious program like viruses.

on Jan 28, 2010 | Computers & Internet

2 Answers

Computer freezes less than 5 min and screen goes white before it reboots itself. Laptop has less than 10hr on it.


If laptop has less than 10hr, it may still be covered by an exchange policy at the store where you bought it which is one possible option to resolve your problem. Anyways, here are some possible freezing causes...
1. hard disk drive has defective sectors (not likely but possible which is why there is exchange)
2. virus infection (pc usually come with a firewall and antivirus which you must activate)
3. conflict between two firewalls, two antivirus or two spyware/malware programs (suppose to only run one of each but often an antivirus program includes features like an internet security suite). To resolve, need to turn off or de-install the program(s) causing the overlapping conflicts.

On the 2nd Tuesday of every month, Microsoft releases a free tool to address virus infections. The tool is called Microsoft Windows Malicious Software Removal Tool. It is usually downloaded in an infected computer's hard drive but if this cannot be done, the tool can be loaded into a USB stick or thumbdrive on another computer then inserted into the infected computer's USB port to be run. Microsoft also has online tools to scan and remove malware. For more information and download go to .... http://www.microsoft.com/security/pc-security/malware-removal.aspx

Mar 18, 2011 | Acer Gateway NV53A36u

1 Answer

My Lenovo ideapad keeps freezing ever since I bought it a month ago.


If laptop was bought a month ago, it may still be covered by store exchange policy. If so, just take it back to store for exchange. If you bought it with a credit card, it may also be covered by the credit card company for its exchange or repair. Also, if you bought an extended warranty when you did the purchase, it will cover not only repair but also replacement should repair not be possible. Finally, there is the manufacturer's warranty which typically is for one year from the date of purchase but you likely will have to ship at your expense to manufacturer's designated repair site.

If you choose to continue troubleshooting yourself, here are possible freezing causes...
1. hard disk drive has defective sectors (not likely but possible which is why there is exchange)
2. virus infection (pc usually come with a firewall and antivirus which you must activate)
3. conflict between two firewalls, two antivirus or two spyware/malware programs (suppose to only run one of each but often an antivirus program includes features like an internet security suite.)

On the 2nd Tuesday of every month, Microsoft releases a free tool to address virus infections. The tool is called Microsoft Windows Malicious Software Removal Tool. It is usually downloaded in an infected computer's hard drive but if this cannot be done, the tool can be loaded into a USB stick or thumbdrive on another computer then inserted into the infected computer's USB port to be run. Microsoft also has online tools to scan and remove malware. For more information and download go to .... http://www.microsoft.com/security/pc-security/malware-removal.aspx

Mar 18, 2011 | Lenovo IdeaPad Z560 Series Black Laptop...

1 Answer

My laptop is infected with 44 viruses in which I cannot download a free antivirus, what shall I do to remove this, everytime I download antivirus it always infected.


There are 2 solutions to this problem. 1. Formatting of your laptop. as a result of formatting your laptop, you may loose valuable informations as well as programs. 2. Downloading a Norton 360 antivirus program into your laptop. after download, you can scan and fix viruses. this will work perfectly well. If your computer doesnt allows you to perform a download, simply download from another computer into an external device such as a USB device and transfer the Norton 360 setup flies to your laptop and run it. after installation process, scan for viruses and fix. I hope this helps.

Dec 15, 2010 | Computers & Internet

1 Answer

The only thing that comes up is a Red Cross Antivirus window, cant seem to remove it. I already have an antivirus downloaded.


Red Cross Antivirus is a rogue anti-virus program that is installed via the Fake Microsoft Security Essentials Alert Trojan. This rogue is installed via a fake Microsoft Security Essentials alert that states you are infected and then prompts you to install 1 of 5 rogues, including Red Cross Antivirus. When the program is installed it will reboot your computer and start before you see the Windows desktop. It will then scan your computer and state that there are numerous infected files found, but will state that it will not be able to clean some of them as it requires the heuristics module in order fix them. In order to activate this heuristic module you will need to first purchase the program. This is a scam, though, as none of the files it states are viruses are actually infected.
Go to TrendMicro.com and run a free online virus scan to eliminate this rogue.
Jim

Sep 26, 2010 | Compaq Computers & Internet

1 Answer

As my computer and my mobile is infected.


Hi,

The best way to remove virus from your mobile is :-

Step 1. Download free version of kersperky from
http://download.cnet.com/Kaspersky-Mobile-Security-Symbian-OS/3000-2064_4-10640241.html?tag=mncol

Step 2 . Install it , activate 30 days trial and update it from update tag antivirus >> updates.

Step 3. After that go to tag scanner and perform full scan.

Step 4. When scan complete remove all infections

Step 5. After removal it will ask you to restart your device. Restart once.

And enjoy Virus/Spyware free environment.

iTechGuru
www.iTechGuru.in

Mar 29, 2010 | Microsoft Windows XP Professional With...

3 Answers

Windows xp virus problem-windows will not boot up


XP Antivirus 2008 is one of the latest counterfeit antispyware that devastates the wolrd wide web. XP Antivirus 2008 usually come up after you installed a video codec that come with Trojan, malware and virus. XP Antivirus 2008 normally generates fake and misleading system popup error messages so end-users will be tricked into purchase XP Antivirus 2008.

This is one of the warnings from the net about this program.

a system restore with disks or a full reinstall may be in your future.... reboot and tap f8 and then boot to safe mode.... does that work ?


Robert

Sep 05, 2008 | Microsoft Windows XP Professional

Not finding what you are looking for?
Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC Logo

1,029 people viewed this question

Ask a Question

Usually answered in minutes!

Top Microsoft Computers & Internet Experts

micky dee

Level 3 Expert

2642 Answers

Les Dickinson
Les Dickinson

Level 3 Expert

18377 Answers

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Are you a Microsoft Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...