10 replies to this topic

[trivium03]

eto po screencaps..


yun pung nakaencircle na red..nakalabas na siya kagad na kapag clinick mo ay magcre2ate lang ng bagong window. tapos kapag dinelete mo babalik lang xa..bale kaya my chi03 yan kasi yan ang name ng computer ko.
tapos yun naman pong nakaencircle ng blue, lumalbas siya kapag iuncheck ko sa folder options yung hide protected operating system files. tsaka eto pa..mga 5 mins after mo iuncheck yung sa folder options kusa siyang mache2ck..hehe! nagulat nga ako eh..para akong minulto..adik..

Help naman po..hehehe..ngayn ko lang toh naencounter..

[ExtremeFusion]

@ trivium03

to TMN

kindly post in english this is an international forum
posting in your native tounge will lessen the rate that others could help you, because they won't understand the thing that you say..

Even though they are Filipinos (including me) here in TMN that can understand you, what about the other people here who has far more knowledge than we have...

Back to your question, that is a New Virus to me too.. I have not encounter such thing..
Can you provide more details and how it started?

[tommie gorman]

It certainly would be much easier to fix it if that were translated. 

Anyone? VIrus's are usually pretty simple to fix.

[fr0stbound]

from your description, that "my chi03" sounds like a copy/clone of the redlof virus. i had a similar case before, but it was named "New Folder". to check, go to Folder Options. under the view tab, disable the "Hide extensions for known file types" option(most of my tech savvy always disables this option, as it lets you see objects in disguise. if that "mychi03" becomes "my chi03.exe", you've got yourself a virus.

use any antivirus to remove it, i recommend AVG(freeware)
look here http://free.grisoft.com/

alternatively, you can get rid of redlof type viruses with this program
http://www.softpedia...f-Remover.shtml

[trivium03]

sorry for speaking in filipino.
Thanks for the reply's. i"ll update you guys of the result.

[trivium03]

uhm, i dont know if ive removed the virus already because when i deleted the "smss.exe" on the registry and when i unchecked the hide protected system operating files it didn't automatically changes it settings. and also when the drive c: it didn't open another window. not just before when the smss.exe is in the USB.

the only problem now is when i click the drive of the USB. is says "Access is denied" ???
but i can still open it in the address bar or explorer.

what do you think?is it because of the smss.exe?

[tommie gorman]

Even though you may have removed it, you may still have to do a restore point to get things back to normal. 

[ExtremeFusion]

reformat the usb flash media.. but back up everything in it before you do...

use run command or window explorer when accessing your usb flash media...

[fr0stbound]

Quote

Even though you may have removed it, you may still have to do a restore point to get things back to normal. 

some viruses(is that correct? or should it be virii?) leave a trace even when it is already removed.

[tommie gorman]

And many forget to do a good cleanup afterwards with ccleaner or diskclean up. 

[trivium03]

thanks for the reply. nod32 also detected it. should have installed it a long time ago.