Question about Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC
I have a friend whose laptop was infected by a virus of which she cannot remove. I'm yet to ask her antivirus though. Based on her, it was a ".scr file extension". it was said that ALL OF HER DOCUMENT FILES WERE REPLACED BY THE .SCR FILE EXTENSION.
what is the best way of solving this problem? is it really a virus? she said that she cannot use or open her documents anymore because of what just happened.
really need help on this, thank you!
Its the W32/Rungbu-A virus, it infects Microsoft Word DOC files by
copying itself to the same filename but with an .SCR extension,
appending the DOC file to the SCR copy, and then hiding the original
The W32/Rungbu-A then sets the computer not to show hidden files (in order to hide the DOC file), to give SCR files a Word icon (so the SCR file looks like a Word file), and to hide file extensions (so the SCR file just displays the filename, not the SCR extension). When the SCR file is run, the Word document is displayed as normal.
To recover your .DOC files just follow these steps:
You have to delete all files detected as W32/Rungbu-A.
Set the following registry entries in order to show extensions and hidden files:
You must change the attributes of the original .DOC files to stop them being hidden.
My answer to your second question, is in November of 2007 the .SCR file extension started to be used to transmit a Trojan. As a script or a screen saver this file can execute other files which carry the Trojan. The SCR file may be embedded within a ZIP file which could also contain a file with a double extension. Many Windows screen savers come with a .SCR extension by default. Usually these will be found in the Windows main directory. Use caution if you receive a screen saver file via E-mail. These files can contain executable code and can be worms or viruses. Note: This file type can become infected and should be carefully scanned if someone sends you a file with this extension.
Posted on Sep 10, 2008
It does not sound like a Virus.
Is she able to Open her docs. using another extension.
If she has a antivirus prog. update prog. Disconnect from Internet,disable System Restore,run virus scan.
Delete any viruses found.
Enable System Restore.
lets know how you went.
Posted on Feb 03, 2008
The laptop is infected by a trojan.it genarally comes when you download screensaver online.install a good antivirus like latest version macafee.the AVG free edition also a good one.
Posted on Feb 03, 2008
a 6ya expert can help you resolve that issue over the phone in a minute or two.
best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
the service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
Posted on Jan 02, 2017
Tips for a great answer:
Aug 17, 2011 | Computers & Internet
on Feb 25, 2011 | Computers & Internet
on Jan 28, 2010 | Computers & Internet
Mar 18, 2011 | Acer Gateway NV53A36u
Mar 18, 2011 | Lenovo IdeaPad Z560 Series Black Laptop...
Dec 15, 2010 | Computers & Internet
Sep 26, 2010 | Compaq Computers & Internet
Mar 29, 2010 | Microsoft Windows XP Professional With...
Aug 13, 2009 | Computers & Internet
Sep 05, 2008 | Microsoft Windows XP Professional
1,029 people viewed this question
Usually answered in minutes!
Step 2: Please assign your manual to a product: