Microsoft Windows XP Professional With Servise Pack 2  for PC
Problem for Microsoft Windows XP Professional With Servise Pack 2...

Virus infecting microsoft programs




By second2dlast on Feb 03, 2008

" "
i have a friend whose laptop was infected by a virus of which she cannot remove. I'm yet to ask her antivirus though. Based on her, it was a ".scr file extension". it was said that ALL OF HER DOCUMENT FILES WERE REPLACED BY THE .SCR FILE EXTENSION.

what is the best way of solving this problem? is it really a virus? she said that she cannot use or open her documents anymore because of what just happened.

really need help on this, thank you!
Comments:

Feb 03, 2008

- thank you so much! I'll suggest these solutions right away! I'll ask her too for further details.

Same Problem

Apr 16, 2009

-   it was a ".scr file extension". it was said that ALL OF DOCUMENT FILES WERE REPLACED BY THE .SCR FILE EXTENSION.

what is the best way of solving this problem? -   rajeshwaran1

Solution #1

posted on Sep 10, 2008
Not Rated)

v_suspect

Rank: Master 
Rating: 86%, 18 votes
Its the W32/Rungbu-A virus, it infects Microsoft Word DOC files by copying itself to the same filename but with an .SCR extension, appending the DOC file to the SCR copy, and then hiding the original DOC file.

The W32/Rungbu-A then sets the computer not to show hidden files (in order to hide the DOC file), to give SCR files a Word icon (so the SCR file looks like a Word file), and to hide file extensions (so the SCR file just displays the filename, not the SCR extension). When the SCR file is run, the Word document is displayed as normal.

To recover your .DOC files just follow these steps:

You have to delete all files detected as W32/Rungbu-A.

Set the following registry entries in order to show extensions and hidden files:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HideFileExt
0


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt
UncheckedValue
0

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ShowSuperHidden
1


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden
UncheckedValue
1


You must change the attributes of the original .DOC files to stop them being hidden.

My answer to your second question, is in November of 2007 the .SCR file extension started to be used to transmit a Trojan. As a script or a screen saver this file can execute other files which carry the Trojan. The SCR file may be embedded within a ZIP file which could also contain a file with a double extension. Many Windows screen savers come with a .SCR extension by default. Usually these will be found in the Windows main directory. Use caution if you receive a screen saver file via E-mail. These files can contain executable code and can be worms or viruses. Note: This file type can become infected and should be carefully scanned if someone sends you a file with this extension.
Was this helpful?
Yes
No

Solution #2

posted on Feb 03, 2008
Not Rated)

krihard

Rank: Wiz  Microsoft Expert
Rating: 84%, 197 votes
the laptop is infected by a trojan.it genarally comes when you download screensaver online.install a good antivirus like latest version macafee.the AVG free edition also a good one.
Was this helpful?
Yes
No

Solution #3

posted on Feb 03, 2008
Not Rated)

quarryswr

Rank: Wiz 
Rating: 88%, 59 votes
It does not sound like a Virus.
Is she able to Open her docs. using another extension.
If she has a antivirus prog. update prog. Disconnect from Internet,disable System Restore,run virus scan.
Delete any viruses found.
Reboot
Enable System Restore.
lets know how you went.
Was this helpful?
Yes
No

Popular Solutions for Microsoft Windows XP


Questions and Unsolved Problems for Microsoft Windows XP


Do you recommend Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC?
Answer

Answer
i have wipro laptop model no 7B1110, which was formatted , now i want to install drivers couldnt... (More)

Answer
AM_MEDIA_TYPE: majortype: MEDIATYPE_Video {73646976-0000-0010-8000-00AA00389B71} subtype: Unknown... (More)

Answer
I'm having trouble getting my Verizon MyFi card to configure on my Dell PC w/ XP or my Dell laptop... (More)


Didn't find what you were looking for?

Describe your problem:

Select a Category:







Ask our Experts

 

Solve Your Problem Now!
Chat Live with an Expert
Chat Now
Top Operating System Experts



Top Computer & Laptop Repairmen

(513) 874-3306
We fix and repair laptop motherboard no video, no...
LaptopOnCall Inc.

(952) 890-7770
Zkarlo.com provides discount and used laptop parts...
Zkarlo.com


       
Solve Your Problem Now!
Chat Live with an Expert
Chat Now

Insert Link
Insert Image
Insert You-Tube clip
Insert List
Insert List
Spell Check

What is this?



Select