- If you need clarification, ask it in the comment box above.
- Better answers use proper spelling and grammar.
- Provide details, support with references or personal experience.
Tell us some more! Your answer needs to include more details to help people.You can't post answers that contain an email address.Please enter a valid email address.The email address entered is already associated to an account.Login to postPlease use English characters only.
Tip: The max point reward for answering a question is 15.
Your computer must be infected with "Malwarewares" and "wanted dangerous objects" thru' external drive eg. flash drives or downloading & installing programs/software from "unknown websites", etc... due to inadequate protections/preventions on your PC/Laptop.
You can use both effective free malware & Spyware programs, like Malwarebytes Anti-Malware &SUPERAntiSpyware,download install & update the database to the latest and scan your PC & any external USB drives.
Use a Free System utility tool eg.CCleaner to cleanup any "craps" from your PC too.
Your will have quite tedious tasks ahead cleanning out the "unwanted malware files
a couplle of options is to see if your PC Antivirus has an option to detect trojans etc on your USB devices. Gogear are basically usb storage devices that act as music players. you have a trojan that has changed settings in you computer. ZFirst set of steps is to eliminate the trojan from your gogear ( after re cleaning your PC). So try these steps. or you can try and reformat the gogear as well.
Press the "Shift" key as you insert the USB drive into
your computer. Holding down "Shift" will keep the computer from
auto-playing the device. Click "Cancel" to exit the auto-run if you do
not hold "Shift" down long enough and the auto-play function starts.
Open the Windows Command Prompt by clicking "Start" and
then highlighting and clicking "Run." Type "cmd" (without the quotes) in
the text box, and press "Enter." If you use Windows Vista, click the
Windows icon, then type "cmd" in the "Search" box and hit "Enter."
Switch the Command Prompt to your USB flash drive by
typing the letter of the drive followed by a colon--for example, "F:"
without the quotes--and pressing "Enter." You can locate the letter that
Windows assigns to your flash drive by clicking "Start," then
highlighting and clicking "My Computer."
List the directory of files on your flash drive by
typing "dir/w/o/a/p" (no quotes) into the Command Prompt and pressing
"Enter." This line will tell your USB drive to compile and display a
list of all files.
Locate common viruses, Trojan horses, or malicious files
in the list. Two of the most commonly reported pieces of USB malware
will appear as "Autorun.inf" or "smss.exe" (both without the quotes).
Unless you are using your USB to transfer a program from one computer to
another, you should be suspicious of any executable file--file types
ending ".exe"--that appears in your flash drive's directory. Also, as a
general rule of thumb, if you see any files on your USB drive other than
ones you have personally stored on it, your flash drive is infected.
Set your USB drive to show all files so that you can
delete them. Copy and paste "attrib -r -a -s -h *.*" (without the
quotes) into the command prompt and press "Enter." These letters stand
for "Read Only, Archive, System and Hidden File," and entering this line
will tell your USB file to recognize them.
Delete any viruses, Trojan horses, malware and
suspicious files. Type "del" (no quotes) followed by a space and then
the name of the file; for instance, "del smss.exe". Press "Enter" to
delete that file from your USB flash drive.
This type of pc error usually happens due to varied reasons.The anti-malware software your using might have deleted critical system files infected by the virus/malware/trojan inside your pc. Using of incompatible software that requires higher configuration other than the configuration you currently have.
I would suggest you to try repairing / recovering your system from your system recovery disk. If you are using Windows XP , boot up with your Original Windows XP CD and repair it.
The avast! Free Online Scanner for Windows XP cannot be harmed with the threats that hide themselves in the files. No unknown virus can affect its scanning process. It proves to be very useful against those infections that can corrupt the antivirus protection software and make it completely helpless. This free online scan can effectively remove viruses, malware, spyware and also the rootkits. It is recommended by the experts not to use more than one antivirus software or else there will be conflicts between the two.
Step1: Disconnect the PC from the internet. Step2: Use a different pc or laptop to download a good antivirus trial version and install it in the infected pc. Step3: Scan all the files until you find the trojan horse(WARNING THERE WILL BE A LOT OF INFECTED FILES!) Step4: Remove All found infections and restart your PC. Step5: Now that the ttrojan is removed you PC should be fine. if it is not then you will need to flash your hard drive and pc. reinstall windows and start all over.
To resolve this problem the easiest way are
1) User Trojan Remover http://www.simplysup.com/
--> Update the definition at the time of installation
---> Scan whole system
----> After successfully removal of trojan uninstall the Trojan Remover
2) Manual Methods
Requirement :- Linux Live CD
-> boot system with Linux Live Cd
--> Mount all drives
---> Locate infected DLL files and Trash them.
----> Restart system into Windows
Its the W32/Rungbu-A virus, it infects Microsoft Word DOC files by
copying itself to the same filename but with an .SCR extension,
appending the DOC file to the SCR copy, and then hiding the original
The W32/Rungbu-A then sets the computer not to show
hidden files (in order to hide the DOC file), to give SCR files a Word
icon (so the SCR file looks like a Word file), and to hide file
extensions (so the SCR file just displays the filename, not the SCR
extension). When the SCR file is run, the Word document is displayed as
To recover your .DOC files just follow these steps:
You have to delete all files detected as W32/Rungbu-A.
Set the following registry entries in order to show extensions and hidden files:
You must change the attributes of the original .DOC files to stop them being hidden.
My answer to your second question, is in November of 2007 the .SCR file extension started to be used to transmit
a Trojan. As a script or a screen saver this file can execute other
files which carry the Trojan. The SCR file may be embedded within a ZIP
file which could also contain a file with a double extension. Many Windows screen savers come with a .SCR extension by default.
Usually these will be found in the Windows main directory. Use caution
if you receive a screen saver file via E-mail. These files can contain
executable code and can be worms or viruses. Note: This file type can
become infected and should be carefully scanned if someone sends you a
file with this extension.