Question about Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC

3 Answers

Virus infecting microsoft programs

I have a friend whose laptop was infected by a virus of which she cannot remove. I'm yet to ask her antivirus though. Based on her, it was a ".scr file extension". it was said that ALL OF HER DOCUMENT FILES WERE REPLACED BY THE .SCR FILE EXTENSION.

what is the best way of solving this problem? is it really a virus? she said that she cannot use or open her documents anymore because of what just happened.

really need help on this, thank you!

Posted by on

  • second2dlast
    second2dlast Feb 03, 2008

    thank you so much! I'll suggest these solutions right away! I'll ask her too for further details.

  • rajeshwaran1 Apr 16, 2009

    it was a ".scr file extension". it was said that ALL OF DOCUMENT FILES WERE REPLACED BY THE .SCR FILE EXTENSION.

    what is the best way of solving this problem?

×

3 Answers

  • Level 1:

    An expert who has achieved level 1.

    MVP:

    An expert that got 5 achievements.

    Scholar:

    An expert who has written 20 answers of more than 400 characters.

    Hot-Shot:

    An expert who has answered 20 questions.

  • Contributor
  • 27 Answers

Its the W32/Rungbu-A virus, it infects Microsoft Word DOC files by copying itself to the same filename but with an .SCR extension, appending the DOC file to the SCR copy, and then hiding the original DOC file.

The W32/Rungbu-A then sets the computer not to show hidden files (in order to hide the DOC file), to give SCR files a Word icon (so the SCR file looks like a Word file), and to hide file extensions (so the SCR file just displays the filename, not the SCR extension). When the SCR file is run, the Word document is displayed as normal.

To recover your .DOC files just follow these steps:

You have to delete all files detected as W32/Rungbu-A.

Set the following registry entries in order to show extensions and hidden files:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HideFileExt
0


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt
UncheckedValue
0

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ShowSuperHidden
1


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden
UncheckedValue
1


You must change the attributes of the original .DOC files to stop them being hidden.

My answer to your second question, is in November of 2007 the .SCR file extension started to be used to transmit a Trojan. As a script or a screen saver this file can execute other files which carry the Trojan. The SCR file may be embedded within a ZIP file which could also contain a file with a double extension. Many Windows screen savers come with a .SCR extension by default. Usually these will be found in the Windows main directory. Use caution if you receive a screen saver file via E-mail. These files can contain executable code and can be worms or viruses. Note: This file type can become infected and should be carefully scanned if someone sends you a file with this extension.

Posted on Sep 10, 2008

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that got 5 achievements.

    Governor:

    An expert whose answer got voted for 20 times.

    Hot-Shot:

    An expert who has answered 20 questions.

  • Expert
  • 43 Answers

It does not sound like a Virus.
Is she able to Open her docs. using another extension.
If she has a antivirus prog. update prog. Disconnect from Internet,disable System Restore,run virus scan.
Delete any viruses found.
Reboot
Enable System Restore.
lets know how you went.

Posted on Feb 03, 2008

  • Level 3:

    An expert who has achieved level 3 by getting 1000 points

    All-Star:

    An expert that got 10 achievements.

    MVP:

    An expert that got 5 achievements.

    Vice President:

    An expert whose answer got voted for 100 times.

  • Master
  • 407 Answers

The laptop is infected by a trojan.it genarally comes when you download screensaver online.install a good antivirus like latest version macafee.the AVG free edition also a good one.

Posted on Feb 03, 2008

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

FBI virus moneypak


You will need to use another computer and download Kaspersky rescue disk. After downloading the disk image burn it to a cd and boot the machine with this disk. Run the rescue disk and it will detect the infected files. When the program if finished select remove all infected files and reboot your computer. You also need to either install a good antivirus program or update the one you have to protect against this type of infection. The Kaspersky rescue disk can be downloaded from their site here:
https://support.kaspersky.com/viruses/rescuedisk

Apr 08, 2013 | Microsoft Windows Vista Ultimate Edition

Tip

How To Remove A Virus From Your Computer


Requirements: On an uninfected PC connected to the Internet, download the following programs to a thumbdrive. We will need this to fix the infected computer.
Instructions:
  1. Shut down the computer as soon as you realize there is a problem. Pop-ups, program errors, dll errors, fake Anti-Virus scanners, and similar are signs there is a problem. Shut down the computer normally, or hold the power button in until the computer shuts off.
  2. Power on the computer, and hit F8 before the Windows Startup screen appears. Select Safe Mode.
  3. Login if asked to, if not select Yes to continue.
  4. Click on the Start menu, select Run, type msconfig and press Ok, or type msconfig into the Start menu search box and press Enter.
  5. Under the General tab, select Diagnostic Startup. Press Apply.
  6. Under the Services tab, check the Hide All Microsoft Services box, and uncheck any services you don't recognize in the window.
  7. Under the Startup tab, select Disable All. Press Apply and Ok.
  8. Don't restart the computer yet.
  9. The System Restore Utility backs up selected files automatically to the Restore folder. Quite often are infected files stored there as backup files, and many Virus Scanners are unable to delete these files. If you suspect your computer may be infected, it is recommended that you disable the System Restore Utility to remove the infected files from the Restore folder.Select your OS for directions on how to disable the System Restore Utility - XP, Vista, 7
  10. While in Safe Mode, insert your USB thumbdrive and open it in My Computer.
  11. Open Combofix.exe, select Ok when it asks. Let Combofix scan and remove any infections it finds. It should restart the computer when it is done. When it restarts, boot up into Windows normally.
  12. Login if asked to, open your thumbdrive in My Computer again, and run Combofix.exe once more.
  13. Open up SmitFraudFix.exe from your thumbdrive. Press any key to continue when asked. Type 2, and press enter. When the scan is complete, restart your computer.
  14. If you had a fake Anti-Virus Scanner infection, open up Remove Fake Antivirus.exe from your thumbdrive. Press Start, and press Yes. When the scan and removal is Complete, restart the computer again.
  15. Install Microsoft Security Essentials, or your choice of Anti-Virus Software when the computer returns back to the desktop.
  16. Restart if asked to, and when the computer restarts, run a Full Scan in Microsoft Security Essentials.

on Feb 25, 2011 | Operating Systems

1 Answer

How can i remove virus


Removing viruses, though technical, is yet a very simple process if all the required steps are properly followed.
The basic steps are:
  • Buy or download a reliable antivirus software
  • Install the antivirus software
  • Update antivirus software with the latest virus definitions
  • Perform a complete system scan
Install an Antivirus Program in the System What is Antivirus program? An antivirus is a program that searches for, identifies and removes potential viruses existing in the computer system.
Antivirus software: Some of the most commonly and reliable antivirus programs available in the market are -
  • Symantec Norton antivirus
  • AVG antivirus
  • McAfee Scan
  • Microsoft Antivirus
The antivirus software should be updated regularly to retain its effectiveness.
Before installing the antivirus, close all open applications and terminate any suspicious processes using Task Manager. Sometimes, you may need to boot into safe mode or safe mode with command prompt to delete suspicious programs and references to them in the Windows Registry (run regedit from the command prompt to open the registry editor).
Search engines are excellent tools to find out whether a certain process is harmful or not. You can also get steps on how to remove a specific virus manually.
Removing the virus beforehand might be necessary, as some viruses will not allow an antivirus to operate. However, if you are not successful, you may still continue with the installation.

Scan the System to Identify and Locate the Virus Usually, the antivirus will run automatically when the system reboots after the installation. Therefore, it might identify the virus automatically. Moreover, you may want to run a quick system scan to locate the virus.
Troubleshooting the Virus Infected Areas After the antivirus identifies the infected areas, the next step is to rectify those areas.
Methods of Eliminating Viruses
Generally, the antivirus adopts one of two methods to eliminate the virus:
  • Removing the virus - When the virus can be easily identified and can be removed without affecting other files, then the antivirus removes it from the host place.
  • Quarantine - his is done when the virus cannot be easily identified removed from the file and the removal of virus means the removal of the complete file. In this method, although the virus is not eliminated, it is rendered inactive by moving the file into "quarantine" and renaming it.
Perform a Full System Scan Even after the virus is removed from the system, the next step is to scan the whole system to ensure that no infected files remain.

Aug 17, 2011 | Operating Systems

1 Answer

My laptop is infected with 44 viruses in which I cannot download a free antivirus, what shall I do to remove this, everytime I download antivirus it always infected.


There are 2 solutions to this problem. 1. Formatting of your laptop. as a result of formatting your laptop, you may loose valuable informations as well as programs. 2. Downloading a Norton 360 antivirus program into your laptop. after download, you can scan and fix viruses. this will work perfectly well. If your computer doesnt allows you to perform a download, simply download from another computer into an external device such as a USB device and transfer the Norton 360 setup flies to your laptop and run it. after installation process, scan for viruses and fix. I hope this helps.

Dec 15, 2010 | Operating Systems

1 Answer

Spyware & Trojan Virus


It might be really what it says, but chances are you have accidentally started a "fake virus scam" malware, that acts a bit like a virus, but with an added function of luring you into paying for some miraculous anti-virus, that will cure your computer of the multiple "infections" it has allegedly "discovered".
Whether or not it is a real infection, the best idea is to prepare on a clean computer (at a friend for example) a startup antivirus CD, from which you could boot your computer and run an antivirus program.

Free boot antivirus products (CD image to burn):
http://devbuilds.kaspersky-labs.com/devbuilds/RescueDisk/
http://dlpro.antivir.com/package/rescue_system/common/en/rescue_system-common-en.iso

Please come back with a testimonial if helped :)

Aug 02, 2010 | Microsoft Windows XP Professional for PC

1 Answer

As my computer and my mobile is infected.


Hi,

The best way to remove virus from your mobile is :-

Step 1. Download free version of kersperky from
http://download.cnet.com/Kaspersky-Mobile-Security-Symbian-OS/3000-2064_4-10640241.html?tag=mncol

Step 2 . Install it , activate 30 days trial and update it from update tag antivirus >> updates.

Step 3. After that go to tag scanner and perform full scan.

Step 4. When scan complete remove all infections

Step 5. After removal it will ask you to restart your device. Restart once.

And enjoy Virus/Spyware free environment.

iTechGuru
www.iTechGuru.in

Mar 29, 2010 | Microsoft Windows XP Professional With...

1 Answer

Virus remover


1.
Update Your Windows Operating System.

2.
Check your computer.
with antivirus and antispyware program.

Feb 08, 2010 | Microsoft Windows XP Professional SP2

2 Answers

MY COMPUTER IS INFECTED WITH TROJAN HORSE SHuer2.aqcw


You should have an antivirus program always running on your computer. If you have one it should be able to get rid of the virus. If you don't have one or you have one but it can't get rid of the virus, try AVAST. It is free at http://www.avast.com. Once you install avast, it will want to run a sweep before your computer restarts. That is the best way to get rid of a virus, before the virus is activated.

Jul 11, 2009 | Operating Systems

3 Answers

Windows xp virus problem-windows will not boot up


XP Antivirus 2008 is one of the latest counterfeit antispyware that devastates the wolrd wide web. XP Antivirus 2008 usually come up after you installed a video codec that come with Trojan, malware and virus. XP Antivirus 2008 normally generates fake and misleading system popup error messages so end-users will be tricked into purchase XP Antivirus 2008.

This is one of the warnings from the net about this program.

a system restore with disks or a full reinstall may be in your future.... reboot and tap f8 and then boot to safe mode.... does that work ?


Robert

Sep 05, 2008 | Microsoft Windows XP Professional

3 Answers

How to remove virus without installing any virus removal software..


Format your disk and Reinstall operating system or find out which all are the infected registry and remove the virus registry contents manually.
or delete (hidden file) autorun.inf from all drives if it exists.

Dec 05, 2007 | Microsoft Windows XP Professional With...

Not finding what you are looking for?
Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC Logo

1,029 people viewed this question

Ask a Question

Usually answered in minutes!

Top Microsoft Operating Systems Experts

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Scott Fryer

Level 2 Expert

80 Answers

Carlos L. Burgos
Carlos L. Burgos

Level 2 Expert

508 Answers

Are you a Microsoft Operating System Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...