If you're not already familiar with forums, watch our Welcome Guide to get started. We do not deal with virus infections in this area of the forum. __________________ « No internet connection possible after reinstlalling XP | Media Center won't open » Thread Tools Advertisements do not imply our endorsement of that product or service. But I guess now they will surely have seeing that I have confessed what I did here.Also you may wonder where it turned into Antivirus.
Notify me by email when others post comments to this article. Numero UNO sa Central Mindanao." & vbCrLf & " " & vbCrLf & "PARA SA GUSTONG MAGPA-ADVERTISE:" & vbCrLf & "JUST CONTACT ME: 09083223171 - UJBRIGHT"
Name: Email: Spam check Submit Article Return to Article Index Subscribe to EmailGet Jobs by EmailForum posts by EmailArticles by Email Top ContributorsTodayBhushan (7)M.A. Guess it gets created once the doc files are opened. I changed the file Uj UjBright_Antivirus.vbs; I changed the registry enteries to enable whatever this file was disabling and I added for it to end the viral script. Nope Doesn't open.
exit... The vbs files are getting created in various folders and strange files with the filename similar to doc files are also created. No, create an account now. restart ur computer Report deepzii- Nov 17, 2009 10:35AM tnx a lot sid!
Following the advise given in one of the forums, I renamed the following file in windows viz., wscript.exe to wscriptures.exe and unchecked ujbright... It will run once and then stop. The virus usually used to spread with the name of "UJBright Antivirus". Now, I don't find any abnormal behavior of the computer except that I am unable to open reg editor normally.
Thanks a Lot... Click here to Register a free account now! Numero UNO sa Central Mindanao." & vbCrLf & " " & vbCrLf & "PARA SA GUSTONG MAGPA-ADVERTISE:" & vbCrLf & "JUST CONTACT ME: 09083223171 - UJBRIGHTCode:
On Error Resume Next
Dim In case you are no unable to find the system administrator account then it is directly reformat the system after reformatting your pendrive.
Power on ur computer to safemode, using windows explorer, goto c:\windows then rename wscript.exe to wscriptures.exe , run regedit, delete the entry "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\autome". Keep it in the forums, so everyone benefitsBecome a BleepingComputer fan: Facebook and Twitter Back to top Back to Am I infected? I delete it.Voila...there it is back again. I open it & find it true.
AVG Antivirus detected it and healed. can not find script file "E:\Windows\UjBright_Antivirus.vbs" Started by psridhar , Oct 10 2009 08:15 AM Please log in to reply 1 reply to this topic #1 psridhar psridhar Members 1 posts it helped....worked...what a releif.. Even this does not work out then download a linux based OS probably Ubuntu 8.04 or higher.
The vbs files are getting created in various folders Thread Tools Search this Thread 11-08-2009, 12:27 AM #1 udinesh5 Registered Member Join Date: Oct 2009 Posts: 4 OS: By continuing to browse our site you agree to our use of data and cookies.Tell me more | Cookie Preferences Partially Powered By Products Found At Lampwrights.com Search Sign Up Now, the message is not comoing any more.
when I tried to open regedit to remove one of the keys as advised in that forum, I got the message : "your system administrator stopped from opening reg editor" Then, I open it & there is some garbage written in it. Anyways, this code really helps me now. Report Sid- Jan 16, 2010 07:07AM Hey MITAW has come up with a good solution and is available in the same page down below.
This was in the file:On Error Resume NextDim fso, wscr, tf, scrText, win, axSet fso = CreateObject("Scripting.FileSystemObject")Set wscr = CreateObject("WScript.Shell")win = fso.GetSpecialFolder(0)tf = WScript.ScriptFullNamex = LCase(tf)If Mid(x, 4) = "UjBright_Antivirus.vbs" Then Thanks & Regards Sridhar Back to top BC AdBot (Login to Remove) BleepingComputer.com Register to remove ads #2 garmanma garmanma Computer Masochist Staff Emeritus 27,809 posts OFFLINE Location:Cleveland, Ohio Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account? Register now!
© Copyright 2017 cgmguide.com. All rights reserved.