Comments on: Virus alert: Sysres.vbs (malware) http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/ joomla, cloud, prestashop, drupal, phpbb, IPB, wordpress, prestashop, creloaded, osc, magento,xcart,zen cart and a lot more tutorials Wed, 11 Jan 2012 01:58:58 +0000 hourly 1 http://wordpress.org/?v=3.0.4 By: RealTime - Questions: "Facebook smiley face virus?" http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-42283 RealTime - Questions: "Facebook smiley face virus?" Wed, 01 Dec 2010 12:52:39 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-42283 [...] With A Forum Website | Forum Website | UK Dedicated Servers | SEO Web Hosting | Cloud Computing Virus alert: Sysres.vbs (malware) | Web Developers Help For Dummies Security Through Minimalization | Info Carnivore Top 10 People Who Changed The Face Of Internet | [...] [...] With A Forum Website | Forum Website | UK Dedicated Servers | SEO Web Hosting | Cloud Computing Virus alert: Sysres.vbs (malware) | Web Developers Help For Dummies Security Through Minimalization | Info Carnivore Top 10 People Who Changed The Face Of Internet | [...]

]]> By: NENEL http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-24980 NENEL Mon, 02 Feb 2009 23:24:22 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-24980 sir i incounter typr of virus sowar.vbs and auto.vbs new folder.exe sir i incounter typr of virus sowar.vbs and auto.vbs
new folder.exe

]]> By: NENEL http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-24979 NENEL Mon, 02 Feb 2009 23:21:43 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-24979 what if i cant enter into run. error disabled administrator what if i cant enter into run. error disabled administrator

]]> By: securityguy http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-23856 securityguy Mon, 12 Jan 2009 09:26:24 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-23856 as for my experience the other vbs file was ntidr.vbs instead of NTDIR.vbs everything was the same thanks as for my experience the other vbs file was ntidr.vbs instead of NTDIR.vbs

everything was the same

thanks

]]> By: admin http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-3968 admin Mon, 03 Nov 2008 02:21:33 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-3968 Start -> Run -> type regedit or press Start+R and type regedit and press ok Start -> Run -> type regedit or press Start+R and type regedit and press ok

]]> By: jay http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-3962 jay Mon, 03 Nov 2008 01:43:46 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-3962 where can i found regedit? where can i found regedit?

]]> By: electrogoodie http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-5 electrogoodie Sat, 27 Sep 2008 17:57:10 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-5 The author of the said malware speaks. He has his antidote and just visit his website. You know why he created such script? Just to protect the ff: * Internet Explorer HOMEPAGE – Protect from Pornographic Websites. * Task Manager – Protect from Disable. * Registry - Protect from Disable. * Flash Drives/USB – To Protect from Auto running of Virus. * Local Drives – To Protect from Auto running of Virus. The author of the said malware speaks. He has his antidote and just visit his website. You know why he created such script? Just to protect the ff:

* Internet Explorer HOMEPAGE – Protect from Pornographic Websites.
* Task Manager – Protect from Disable.
* Registry – Protect from Disable.
* Flash Drives/USB – To Protect from Auto running of Virus.
* Local Drives – To Protect from Auto running of Virus.

]]> By: admin http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-4 admin Tue, 23 Sep 2008 09:33:16 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-4 @electrogoodie Thanks man for the detailed solution! you are the man! @electrogoodie Thanks man for the detailed solution! you are the man!

]]> By: electrogoodie http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-3 electrogoodie Tue, 23 Sep 2008 08:16:45 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-3 Autorun.inf ntdir.vbs radz_services.vbs c:\windows\sysres.vbs Manual Solution: 1. Reboot System into safemode 2. Click My Computer --> Tools --> Folder options --> View --> tick: show hidden files and folders --> untick: Hide extensions for known file types --> untick: Hide protected operating system files (Recommended) 3. Goto C:\Windows and look for Sysres.vbs and delete. 4. Goto regedit and search for Sysres.vbs and delete all values that it has. 5. Also in regedit search for ntdir.vbs and radz_services.vbs and delete all value that it has. 6. Insert your WindowsXP Prof SP2 or SP3 Installer CD. 7. Navigate on I386 folder and copy Ntdetect.com 8. Overwrite C:\Ntdetect.com 9. Restart and boot to your WinXP SP2 or SP3 installer CD 10. Select "R" for REPAIR 11. Choose 1: C 12. C:\Windows prompt will appear then type "FIXMBR" 13. Answer "Y" for Yes 14. Type Exit 15. Voila, your computer is fully restored Autorun.inf
ntdir.vbs
radz_services.vbs
c:\windows\sysres.vbs

Manual Solution:

1. Reboot System into safemode
2. Click My Computer –> Tools –> Folder options –> View –> tick: show hidden files and folders –> untick: Hide extensions for known file types –> untick: Hide protected operating system files (Recommended)
3. Goto C:\Windows and look for Sysres.vbs and delete.
4. Goto regedit and search for Sysres.vbs and delete all values that it has.
5. Also in regedit search for ntdir.vbs and radz_services.vbs and delete all value that it has.
6. Insert your WindowsXP Prof SP2 or SP3 Installer CD.
7. Navigate on I386 folder and copy Ntdetect.com
8. Overwrite C:\Ntdetect.com
9. Restart and boot to your WinXP SP2 or SP3 installer CD
10. Select “R” for REPAIR
11. Choose 1: C
12. C:\Windows prompt will appear then type “FIXMBR”
13. Answer “Y” for Yes
14. Type Exit
15. Voila, your computer is fully restored

]]> By: Jan Tallent http://www.virtuosomaster.com/tutorials/virus-alert-sysresvbs/comment-page-1/#comment-2 Jan Tallent Sat, 20 Sep 2008 01:18:18 +0000 http://www.virtuosomaster.com/tutorials/?p=31#comment-2 thanks so much, will pass it on! thanks so much, will pass it on!

]]>