Long Live Sowar
14 August 2008
Long Live Sowar is a modified title of Internet Explorer on computers infected with the malicious sowar.vbs.
Aliases:
-
Risk Level: Low
File Size: Varies
Affected System: Windows
Common Symptoms:
1. Internet Explorer title shows as “Long Live Sowar”
2. Presence of the following files: sowar.vbs, SysRes.vbs, Cool USEP and Scandal.vbs
Related posts:
- G.O.D Saikoboy’s – Internet Explorer
G.O.D Saikoboy’s is the modified title of Internet Explorer for computers that was infected by a worm that runs itself with...
- XPC Infosystem
XPC Infosystem is part of the worm that may hijack and modify Internet Explorer settings. It may also add “XPC Infosystem”...
1. Go to Start > Run and type: cmd and press press Ok.
2. You may need to change the directory to root of C:, type: cd \, then press Enter
3. Type: attrib -s -h -r -a autorun.inf, , then press Enter
4. Type: dir, , then press Enter. This will display if Autorun file is present.
5. Type: del autorun.inf, , then press Enter
6. Search for and remove sowar.vbs, SysRes.vbs, Cool USEP Scandal.vbs
7. You may need to change the directory to root of C:, type: cd \, then press Enter
8. Type: attrib sowar.vbs.* -s -h -r -a, then press Enter
9. Type: dir /s sowar.vbs, then press Enter
10. If the file is present, type: del sowar.vbs, then press Enter
11. Repeat the above commands for each drive on your computer including your flash/usb drive.
12. Repeat these instructions to search for and delete SysRes.vbs, Cool USEP Scandal.vbs on each drive if present.
13. Exit the command prompt by typing “exit” and reboot your computer.
14. Proceed with Flash Disinfector
i can’t delete this script in my cellphone’s memory card..
or even in my flash disk..
could you please help me how to eliminate this script…
thanks
i cant delete USEP Scandal using those commands. please help.
me too,,i cant delete it either,,wat shud we do,,my boss was angry with me wen she saw iexplorer’s default site was redtube.com..oh,,dat was very embarrasing,,,errr,,plzz help me,,
NOOB KILLER BY LEERZ IS THE SOLUTION!
@bebz010 try use firefox xD
u must use hijackthis and try to scan then use spybot search and destroy when u see the error of longlive sowar try to delete it in the system registry just fallow what is location of the spyware
guys just use symantec antivirus
better use from ESET NOD32 Antivirus, it really works at all, it will surely delete and never come back again
ESET NOD32 antivirus just detects repeatedly… can’t even kill the worm!
1. download
install it in ur computer.
2. click start >click document> find tools bar and then click it> after u click it > click folder option> click view> find show hidden file folder and click it find also hide extension for unknown file and hide protected operating system file (Recommended) and unchecked it.
fined the unknown program in drive C:\ and delete it
3. if u cannot delete the program then run the procexp.exe find the fiel on procexp.exe and . kill process/..
1. download procexp.exe
install it in ur computer.
2. click start >click document> find tools bar and then click it> after u click it > click folder option> click view> find show hidden file folder and click it find also hide extension for unknown file and hide protected operating system file (Recommended) and unchecked it.
fined the unknown program in drive C:\ and delete it
3. if u cannot delete the program then run the procexp.exe find the fiel on procexp.exe and . kill process/..
I heard that over a period of time sowar.vbs can ruin your system.. It causes your computer to hang, resets randomly and disables your task manager and autoplay.. Are these true??
how do i remove it from my USB??? i’ve deleted it manualy but now i can’t open my USB w/o autorun…
follow the instructions written on there and the all of the viruses in your computer will be deleted permanently
Reformat your computer
use file shredder then delete it manually
I heard that over a period of time sowar.vbs can ruin your system.. It causes your computer to hang, resets randomly and disables your task manager and autoplay.. Are these true??
yes it is very very true. Definitely. Follow webmaster’s instruction i have remove that stupid virus using that.
This is the easiest way to remove redtube and long live sowar on your internet explorer:
1. Go to Control Panel
2. Look for the Network Internet Connections (or Internet Options)
3. Go to Internet Options
4. Go to the “Advance” tab
5. Select Reset
6. This will reset your explorer to its original settings
7. The redtube and and the sowar will be gone after this
8. You can update your internet explorer later
9. Try this pls..it works for me and many who tried it.
just use Spyware Doctor v6.0.0.385
I Fix this problem
Part 1:”http://www.mediafire.com/?yyymeq3q0mt”
Part 2:”http://www.mediafire.com/?umyjqe44muy”
Part 3:”http://www.mediafire.com/?zw0ehuajymy”
part 1 is the SpyEraser V2
part 2 is the serial but this is not needed….
part 3 is the RRT
1. Just install the SpyEraser V2…
2. Run it when its scanning just stop it…
3.Go to the “Settings Tab” and in the left pane
click “Restriction”…
4. Click the button “Default”…
5. Open TaskManager or press “CTRL+ALT+DELETE”
6. On the process tab “End Process” the “wscript.exe”
7. Delete this file on your harddrive or flashdrive
autotun.inf, sowar.vbs, SysRes.vbs, Cool USEP and
Scandal.vbs, and other “.vbs”
8. Go to C:\WINDOWS\sytem32\
9. Proceed to step 7
10. Open RRT
11. Check all the options and click apply…
12. Close all windows and restart your computer…
it doesn’t work
help me
use Hijackthis.. then manually remove the sowar and redtube in the registry..
try web master’s suggestion… it works
guys.. you dont know how to delete sowar? just restore ur system.. hehehehe… back ur files up..
Guys, i know how 2 remove the sowar
Try this….
1. Go to Start > Run and type: cmd and press press Ok.
2. You may need to change the directory to root of C:, type: cd \, then press Enter
3. Type: attrib -s -h -r -a autorun.inf, , then press Enter
4. Type: dir, , then press Enter. This will display if Autorun file is present.
5. Type: del autorun.inf, , then press Enter
6. Search for and remove sowar.vbs, SysRes.vbs, Cool USEP Scandal.vbs
7. You may need to change the directory to root of C:, type: cd \, then press Enter
8. Type: attrib sowar.vbs.* -s -h -r -a, then press Enter
9. Type: dir /s sowar.vbs, then press Enter
10. If the file is present, type: del sowar.vbs, then press Enter
11. Repeat the above commands for each drive on your computer including your flash/usb drive.
12. Repeat these instructions to search for and delete SysRes.vbs, Cool USEP Scandal.vbs on each drive if present.
13. Exit the command prompt by typing “exit” and reboot your computer.
14. Proceed with Flash Disinfector
i dont get the instruction clearly
i deleted the sowar.vbs but now whenever i restart my computer says cannot find sowar.vbs. i cant format because there is an error during setup but its not from the cd and my folder options is infected so i cant view hidden files. my internet explorer is also gone. firefox seems to be infected too.
pls help.
I guess another alternative is by booting into safe mode first then logging into the main administrator account. I tried that and regedit was working for me. I just did not do it that way since I can’t install MBam in safe mode ;)
Hpoe this helps…
what about the task manager? and i also have the problem of “vbs. extension blah blah cant find” something like that when the windows opened.
guys, please help me. I am not a techy person so I am not very good in computer programs. My computer is infected with sowar and I cannot easily follow the instructions given above. I would like to try Tristrum Santos’ advice but I am worried whether other programs in my computer will be affected. oh, please help !!!
Tristrum Santos’ way is the easiest way, everyone should try it! It is not too technical and any noob$ could do it.
hey guys!
help!i couldn’t remove the sowar on my phone(both on memory card and phone memory..)
how do i do it?:(
EVERYTHING everyone said above, is what I am currently experiencing right now. Let’s help each other please and eat spaghetti.
I don’t get the ‘you may need to change the directory to root of C:’ part. I’m really not into computer technical stuffs. HEEEEEEELP!!!! :(
and do I download the Flash Disinfector?
just restore your computer good luck…
hehehehe….
hey anybody ! can you help me how to remove sowar.vbs
i cant view my drive c: its infedted too that ask ” can not find script file “c:/sowar.vbs”. and also my home page long live sowar cant change … anybody plzzz help me….
psl.. give me a tip how to remove (sowar virus like redtube…. and huelar virus pls…. thank alot…
i have a problem with sowar and i want to delete it,is it really effective(solutions) and won’t it harm how the computer runs?
hey guys if you still have the file sowar.vbs, etc… better send the file to the distributor of anti virus you use. In that way they might get a solution for that.
can’t do # 1 webmaster, autorun.inf is disabled.
can’t also delete manually, it says regedit is disabled by the administrator.
pls help.. tnx
yes! now it’s gone.
Use the UnHookExec.inf if regedit is disabled, save it in your desktop, right click and choose install. restart PC. then try regedit again.
manually delete any sowar items. esp the one w/ .vbs if u found one. keep on searching for it.
restart then presto.. goodluck!
-=plsss give me the complete and the best solution on how to delete the sowar??????=-
If my first idea doesn’t work, try this one:
You need an application to remove the sowar script on your registry. Here’s one:
1. Download and install “Full Speed v2.7″ this is an internet speed booster application.
2. After installation you will be prompted if you want to boost your internet speed or restore your original settings. Choose to restore your original settings and then restart your pc.
3. Your internet explorer will be restored to its original settings. Then uninstall the Full Speed v2.7. Save the installer for further use. :’)
Note: If you’re antivirus is Avast, pause it first before downloading and using this application. (Try other techies ideas post on this site!!)
hi.. mine was fixed.. tnx to tristrum for the reset option..
i used spybot to fix entering redtube then reset option at tristrum.. tnx man.. sorry for my bad english
You can use Hjack this then you delete the scandal using nod 32 antivirus
the manual delete using command prompt worked for me. even avast detected and cleaned sowar virus in my USB. just keep up with it.. turn off system restore, log in safe mode then do the manual delete. but seriously, avast! detected the s**t.
guys! when i tried running the CMD it automatically shuts down.. .ehehe.. i got very dissapointed because i keep on reseting the home page and still it goes to redtube.com.. damn! i will try the noob killer by tomorrow.. (the computer affected with SoWar is my cousins) :D thanks for the info though! :)
HI..
Just wanna add a resolution to this stubborn SOWAR.VBS..
Here’s one,,
Try to download the “HijackThis”, it’s free. When you finish downloading it.
Install the application. Click the “Do a system scan only”,, your going to see all the scanned files including files related to SOWAR. VBS. Check all that files and click FIX.. That’s it!!! Problem solved in a minute….
:-)
g_neji_214
Maybe the solution would be antivirus….
Leave your response!
51 Responses
Post your remarks about Long Live Sowar. Get feedback and help others to resolve this issue.Subcategory
Recent Comments
Recent Posts
Most Commented
About precisesecurity
A trusted computer security web site that provides efficient and free solution to remove Trojans, viruses, rogue programs and other similar malicious activities.
Copyright © 2006-2012 | Tech Blogs - precisesecurity.com | Privacy Policy