Comments for Spyware-Virus Files and Process

Comment on BOOT.VBS by Sekotory

Sekotory — Sat, 16 Aug 2008 16:29:34 +0000

Please, can you help me fix this problem:

On starting my laptop, I get an error message “….cannot find c:user…..\appdata\roaming\Adobe\Manager.exe”

tried to use previous advices as above but unfortunately it didn’t work!

two things I need to mention:

1- I located the manager.exe file in adobe sub-folder (…appdata>roaming>adobe>manager.exe) tried to run it?! but didn’t work..tried to delete it & restart, also didn’t work!!

2- Couldn’t find that file in the startup registery to uncheck? where could it be..I have run the msconfig.exe

n.b: i also tried to run regcure software but it didn’t fix it?

I would be very grateful for your help with this problem,

ASA

Comment on tazebama.dll by Belal Bitweni

Belal Bitweni — Sat, 16 Aug 2008 07:55:08 +0000

i need removal tool for tazebama virus

Comment on faizal.js by Art

Art — Fri, 15 Aug 2008 01:51:06 +0000

go to registry editor.. find “faizal” and delete it.
then restart your pc.

Comment on BOOT.VBS by V (for Vendetta)

V (for Vendetta) — Thu, 14 Aug 2008 01:06:55 +0000

This is for comment #47, Vi.

Your problem is that your computer is trying to start a program at boot up that you may not have all the files for. My guess is you tried to install an Adobe program, and maybe stopped midway, or tried to delete it or partial delete it. Anyway, just do this:

1)Click the “Start” Button
2)Click “Run”
3)Type msconfig
4) Click the last tab that says “Startup”
5) You’ll have to scroll down and find the one that says something like “Manager” under Startup Item tab, and something like “c:\documents and settings\Administrator\…..Adobe\Manager.exe” under the “Command” tab.
6) All you have to do is uncheck that one item (which is causing all those error boxes) that way it does not try to boot up at the start when your computer boots up. After you uncheck that box, you will be prompted to restart your computer, and then you will have to click OK on one more box that just says that you chose not to run a particular program on startup bla bla bla. That should solve your problem and those error boxes should not show up anymore.

Comment on regsvr.exe by Prabhakar

Prabhakar — Wed, 13 Aug 2008 10:06:02 +0000

Sorry! the said procedures are not helped to delete the regsvr.exe from my PC

Comment on MsUpdate.sys.vbs by bozzzmeg

bozzzmeg — Tue, 12 Aug 2008 09:11:30 +0000

dytdytgukug

Comment on regsvr.exe by sandanuwan

sandanuwan — Mon, 11 Aug 2008 02:29:29 +0000

there is no autorun.inf file so i cant use the above method. are there any methods

Comment on BOOT.VBS by Faisal

Faisal — Sun, 10 Aug 2008 07:40:46 +0000

hi
how can solve the error message
when i start the windows
“C:\Documents and Settings\Administrator\boot.vbs”.

Comment on tazebama.dll by tayeb

tayeb — Fri, 08 Aug 2008 14:09:09 +0000

I need removal tool for this virus

Comment on BOOT.VBS by vi

vi — Fri, 08 Aug 2008 02:34:10 +0000

Hi,

Can you please help me. On restarting my pc, it says

“cannot find c:\documents”
than “cannot find c:\Settings\user\application”
then “”cannot find c:\Data\Adobe\Manager.exe”

Thank you.

Comment on MsRun32.exe by balu

balu — Wed, 06 Aug 2008 10:45:13 +0000

W32.Imaut.CO
Every time showing this prob

Comment on password_viewer.exe by kat

kat — Mon, 04 Aug 2008 09:38:50 +0000

anti virus and anti spy wares cannot detect that file

Comment on sxs.exe by Firat KELER

Firat KELER — Fri, 01 Aug 2008 18:31:29 +0000

I couldn’t see them in processes but I managed to get rid of that damnable worm by modifying registery keys as you told. Thanks.

Comment on MarioForever.exe by ALI SMAIDI

ALI SMAIDI — Wed, 30 Jul 2008 05:25:22 +0000

if u want i found that if u just stop the printing spool service and run anti-virus, it will be cleaned and then u just can make a small applications (u can use C#, or vb) to go over the whole network and if it matches the file name MarioForever.exe to delete, its will completely out of the network

basicly what does it do, it attach itself to the service application and when u try to clean it u can’t cause its Microsoft service built into windows adn running by default…

3 steps, STOP, CLEAN, RUN

i’m not sure if it doesn attach itself to another running processes, but that what happens when on one of the workstation that got infected, and it worked so good after that.

anyways, it still easier than formating the computer, i know its a hussle if its a server specialy…

Comment on regsvr.exe by abhishek

abhishek — Tue, 29 Jul 2008 18:07:42 +0000

thnx man …..viruses freak me out …this 2 was
thnx again

Comment on iloveher.exe by webmaster

webmaster — Mon, 28 Jul 2008 01:37:57 +0000

Vin23, please try Flash disinfector:
http://www.precisesecurity.com/tools-resources/adware-tools/flash-disinfector/

Therea are also other free tools and virus removal software there that you may try.

Comment on Ramal Jodoh.pif by aprilia

aprilia — Sat, 26 Jul 2008 10:43:52 +0000

tolong ramalkan saya

Comment on iloveher.exe by vin23

vin23 — Sat, 26 Jul 2008 10:08:43 +0000

hi how can i remove the say no to drugs on my monitor even without any anti virus scanner?and how can i do the same with my mp4 player?

Comment on BOOT.VBS by Nirmal Kumar Rajak

Nirmal Kumar Rajak — Sat, 26 Jul 2008 06:37:48 +0000

cannot find script file c:\Documents and Settings\Administrator\boot.vbs

Comment on 360Safe.exe by Mario

Mario — Tue, 22 Jul 2008 19:47:49 +0000

Please.. What antivirus….

Comment on 360Safe.exe by Mario

Mario — Tue, 22 Jul 2008 19:37:14 +0000

But do you know the name of antivirus tha can help me….

Comment on tazebama.dll by ali

ali — Mon, 21 Jul 2008 17:03:39 +0000

i need removal tool for tazebama virus

Comment on faizal.js by Angie

Angie — Mon, 21 Jul 2008 00:13:34 +0000

Hi. I have the same problem as Anthony! Once my antivirus software quarantined the virus, I cannot properly open my mass photo storage device (drive H), which was the one infected apparently. How can I fix this??

Comment on Funny UST Scandal.avi.exe by HyperOverLoad

HyperOverLoad — Sun, 20 Jul 2008 03:38:48 +0000

I dont like your solution, why would you have to wipe a drive to remove a virus, if thats the solution then you have no troubleshooting abilities and should find another occupation!!!

Comment on msacm32.drv by Mokhtar

Mokhtar — Sat, 19 Jul 2008 18:56:04 +0000

I have kaspersky inti-virus with update in 25-6-2008 but it no detected this virus …..but when i istalled AVG v 7.5 with last update today 19-7-2008 it detected this virus ……. I think if wana more security must get kaspersky and avg … I think this.

sorry for my bad english.

Comment on hinhem.scr by zakarea

zakarea — Thu, 17 Jul 2008 08:54:57 +0000

how 2 remove virus-hinhem.scr

Comment on BOOT.VBS by suchi

suchi — Tue, 15 Jul 2008 04:57:27 +0000

hi…i havent yet received any solution to my problem..please help me somene..
m posting my problem once again..
i was facing the same problem “windows script host cannot find boot.vbs”
aftr trying sushil’s solution, the error window stopped popping up, but i got soem enw kind f problm.. every time i start my lappy, i get 2 new error messages . 1 is “uu” which displays the error “failed to open log file for editing” when i “ok” this window, i get the other one which is “ActMon Commander” which displays “wrong decryption password for this log file” please suggest somethng..have i deleted soemthng which i shud not have??

Comment on regsvr.exe by gowda

gowda — Wed, 09 Jul 2008 17:12:13 +0000

thank you for the detailed and simple solution. My system is fast.

Comment on nvsvcsb.exe by Lai

Lai — Mon, 07 Jul 2008 06:35:22 +0000

I found a file, nvsvcsb.exe in my PC and make my CPU used alpt of memory space.
Please let me know how to remove it.
Thank you.

Comment on regsvr.exe by utkarsh

utkarsh — Fri, 04 Jul 2008 08:19:24 +0000

i m unable to delete the regsvr.exe spyware.
to remove that i had applied all the given processes.
but no one help me to remove that spyware
please help me to remove that spyware

Comment on regsvr.exe by utkarsh

utkarsh — Fri, 04 Jul 2008 08:16:51 +0000

i am unable to remove that spyware through all these process

Comment on BOOT.VBS by Rekha Koirala

Rekha Koirala — Mon, 30 Jun 2008 07:04:42 +0000

When we open the window,its show can not find script file”c:\Documents and settings\user\boot.vbs” please help us for the problem.

Comment on BOOT.VBS by Rekha Koirala

Rekha Koirala — Mon, 30 Jun 2008 07:03:22 +0000

Whin we open the window,its show can not find script file”c:\Documents and settings\user\boot.vbs” please help us for the problem.

Comment on faizal.js by anthony

anthony — Fri, 27 Jun 2008 19:47:42 +0000

hello, i would like to know some after work restore,i’ve followed the step mentioned as above the web site, but after the faizal.js has successfully removed, here comes another problem, i couldn’t open my drive c: n D:, once i double click the drive C, it pop up with a tittle “window script host” with a content can not find script file “C:\faizal.js”, same thing happen to drive D, can u teach me how to fix it? hope to receive your reply to provide me a solution, thank you so much.

Comment on faizal.js by shan

shan — Thu, 26 Jun 2008 05:47:24 +0000

i use NOD32 and it kills that virus. Try it and you can uninstall it later.

Comment on BOOT.VBS by Tulsi Jung Basnet

Tulsi Jung Basnet — Wed, 25 Jun 2008 16:21:16 +0000

Thanks PG.It really worked.Your suggested steps worked.

Comment on BOOT.VBS by Tulsi Jung Basnet

Tulsi Jung Basnet — Tue, 24 Jun 2008 17:00:29 +0000

Dear sir,
I have virus related problem with my machine that is whenever i turn on my computer the message pops up with the following words and remain on the screen until i shut down my computer
1) cannot find script file c:\system32\boot.vbs
2) cannot find script file c:\Documents and Settings\Administrator\boot.vbs

Please help me to get rid of this problem.

Tulsi Jung Basnet

Comment on regsvr.exe by Nilesh

Nilesh — Tue, 24 Jun 2008 11:29:53 +0000

Thanks

i removed this virus from my system.
now my pc is fast

thanks

Comment on BOOT.VBS by rgv

rgv — Sun, 22 Jun 2008 07:19:58 +0000

dear sir, i ve the same problem, as a result i hd deleted the boot vbs file from windows/system32.. now i m getting a problem in starting the windows. it strucks on the login window, as i click ok, it says loading window, and soon says saving your setting and strucks to login screen. kindly help me sir, i m unable to open the window.

Comment on CbEvtSvc.exe by Star Brooks

Star Brooks — Sun, 22 Jun 2008 03:38:03 +0000

I just discovered thru Anti Spy that I have this stupid Trojan lodged in my index.html page of my web site. So I threw out the first one and got one I have not used in a couple of years I always keep old index files and I renamed it as an index file and my Anti-Spy showed I has Chollet B all fresh and funky. I would like to put my website back online and I cannot do it with infected index files. Help!

Comment on BOOT.VBS by baiba

baiba — Sat, 21 Jun 2008 10:48:26 +0000

Thanx PG it worked!

Comment on BOOT.VBS by rahul

rahul — Fri, 20 Jun 2008 04:33:34 +0000

thax for the suggetion this is very helpfull & working very very very thanks to u…………..

Comment on BOOT.VBS by Noe

Noe — Fri, 20 Jun 2008 02:57:34 +0000

Dear sir,
I have one problem with my computer and it is, whenever i turn on my computer it comes up with the following two message which remains intact until i turn it off and it is:
1) Can not find script file “c:\WINDOWS\system32\boot.vbs”.
2)Windows cannot find ‘wproxp.exe’ Make sure you type the name correctly, and then try again.

Please help me to get rid of this problem.

Waiting for your reply.

Comment on BOOT.VBS by Deepak

Deepak — Thu, 19 Jun 2008 16:09:45 +0000

Dear Sir,
When i open our computer there is one message it’s coming out windows script host “C:\WINDOWS\system32\boot.vbs”.
when i o ok again it’s come.
Please give the solution which is we have to do.

Comment on BOOT.VBS by yousuf

yousuf — Tue, 17 Jun 2008 14:33:40 +0000

Dear Sir,

when we open our PC one message appeared.
cannot find script file “C:\WINDOWS\system32\boot.vbs”.

when we scan our system with antivirus but this message is appear again and again. When we delete but he is not delted. You give me proper solution. Are this problem is virus or not.

thanks

Comment on BOOT.VBS by Kevin Kahn

Kevin Kahn — Tue, 17 Jun 2008 11:34:34 +0000

I tried the solution given by Yuvraj and XXX neo and now i am unable to login with any user name. Hell

Comment on BOOT.VBS by suchi

suchi — Sun, 15 Jun 2008 04:05:48 +0000

hi…i was facing the same problem “windows script host cannot find boot.vbs”
aftr trying sushil’s solution, the error window stopped popping up, but i got soem enw kind f problm.. every time i start my lappy, i get 2 new error messages . 1 is “uu” which displays the error “failed to open log file for editing” when i “ok” this window, i get the other one which is “ActMon Commander” which displays “wrong decryption password for this log file” please suggest somethng..have i deleted soemthng which i shud not have??

Comment on regsvr.exe by Abhay Deshpande

Abhay Deshpande — Thu, 12 Jun 2008 06:42:16 +0000

Thanks. It helped. Thanks for your time and giving detailed solution, step by step.

Comment on clcr.exe by attacked

attacked — Mon, 09 Jun 2008 08:40:50 +0000

This is really hard to remove. First challange of the day is finding it!!
This and the dll that dropped it stops lots of things from running like hijackthis.
You cant even type the word trojan in ie or it closes it.
It keeps connecting to all kinda of p0rn sites and downloads p0rno stuff.
rootkit finders cant find the clcr.exe but i know its there cus i see it running!!
Help!!!!
recovery console time!!

Comment on BOOT.VBS by Onkar Sharan

Onkar Sharan — Thu, 05 Jun 2008 01:47:06 +0000

Dear Sir,

when we open our PC one message appeared.
cannot find script file “C:\Documents and Settings\Ad\boot.vbs”.

when we scan our system with antivirus but this message is appear again and again. When we delete but he is not delted. You give me proper solution. Are this problem is virus or not.

thanks

Omkar Sharan
Patna

Comment on BOOT.VBS by Navin Kumar

Navin Kumar — Tue, 03 Jun 2008 06:40:47 +0000

Dear Sir,

when we open our PC one message appeared.
cannot find script file “C:\WINDOWS\system32\boot.vbs”.

when we scan our system with antivirus but this message is appear again and again. When we delete but he is not delted. You give me proper solution. Are this problem is virus or not.

thanks

Navin Kumar
IIT Roorkee

Comment on BOOT.VBS by Sambeet

Sambeet — Mon, 02 Jun 2008 11:19:53 +0000

my problem is that, when i boot my desktop. the desktop starts easily and come to the working mode. but one message box is appear and it contains cannot find “…\administrator\boot.vbs”. When i close this diolog box again same message is appear repeatitatively.
please help me to remove this problem.
thanks
sambit

Comment on BOOT.VBS by Ajay Saxena

Ajay Saxena — Mon, 02 Jun 2008 07:29:23 +0000

dear sir,
my problem is that, when i starts my computer. the computer starts easily and come to the working mode. but one message box is appear and it contains cannot find “C:\WINDOWS\system32\boot.vbs”. When i close this diolog box again same message is appear repeatitatively.
please help me to remove this problem.
thanks
Ajay Saxena

Comment on BOOT.VBS by Grace

Grace — Fri, 30 May 2008 17:59:46 +0000

I have a similar problem my computer Windows Script Host displays - Can not find the script file “C:\Document and Setting:\Administrator\boot.vbs” and its very irritating and I cannot remove it. Pls Help!

Comment on BOOT.VBS by Sambeet

Sambeet — Fri, 30 May 2008 17:51:05 +0000

Comment on BOOT.VBS by Chand S. Rana

Chand S. Rana — Wed, 28 May 2008 02:05:51 +0000

Comment on regsvr.exe by Kedar Dingankar

Kedar Dingankar — Tue, 27 May 2008 04:39:07 +0000

Thanks.
This is a very good solution.
I am able to remove the viruses using this.

Thanks to u again.

Comment on sxs.exe by Jade

Jade — Sun, 25 May 2008 14:44:33 +0000

sxs.exe is a worm virus that goes from pc 2 pc via USB ports ect remove it by
First thing. Follow the instruction below. Follow it precisely or you can’t continue to the second step.

0. Press Ctr-Alt-Delete > Processes > locate “SVOHOST.EXE” and click End Process.

Removing Autostart Entry from the Registry
Removing the autostart entry from the registry prevents the malware from executing at startup.
If the registry entry below is not found, the malware may not have executed as of detection. If so, proceed to the succeeding solution set.

1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
2. In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Run
3. In the right panel, locate and delete the entry: SoundMam = “%System%\SVOHOST.exe“
(Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, and C:\Windows\System32 on Windows XP and Server 2003.)

Restoring Modified Entries from the Registry or you can skip these steps by restoring the registery value from this file (The file only available for 90 days. Email me if the link fail). Just unzip it and double click all file.
1. Still in Registry Editor, in the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Explorer>
Advanced>Folder>Hidden>SHOWALL
2. In the right panel, locate the entry:CheckedValue = “0?
3. Right-click on the value name and choose Modify. Change the value data to: 1
4. In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services>srservice
5. In the right panel, locate the entry: Start = “dword:00000004?
6. Right-click on the value name and choose Modify. Change the value data to: 2
7. In the left panel, double-click the following: HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services>wscsvc
8. In the right panel, locate the entry: Start = “dword:00000004?
9. Right-click on the value name and choose Modify. Change the value data to: 2
10. Close Registry Editor.

The second step. Now you should be able to unhide your files.

Go to My Computer.
Locate the toolbar, click: Tools>Folder Option>View
>check “Show hidden files and folder”
>unchecked “Hide protected operating system files (Recommended)”

Click Apply.

And you are ready to delete the sxs.exe and autorun.inf in your USB drive, external hardisk, floppy disk or any other infected removal drive.

Step 3: Deleting the winscok.dll file.

1. Go to My computer.
2. Paste the following into the Address bar (without the quotation mark) “C:\WINDOWS\system32”
3. Locate the file winscok.dll in that folder.
4. Delete it use Shift+Delete.

Step 4: Deleting sxs.exe and autorun.inf safely

1. Open My Computer.
2. Locate the infected drive. Let say drive K:. DO NOT DOUBLE-CLICK IT .
3. Right-click and choose Open
4. You should able to view your drive K: root directories now.
5. Locate sxs.exe and autorun.inf.
6. Delete them without mercy. Use Shift+Delete

That damn worm should not bother you anymore

Comment on MarcMaynard.exe by jay

jay — Fri, 23 May 2008 08:13:04 +0000

same as me… marc maynard are still in my computer..

Comment on BOOT.VBS by blG

blG — Thu, 22 May 2008 05:45:02 +0000

Thanks for giving fruitfull info!

Comment on MarioForever.exe by titus

titus — Wed, 21 May 2008 17:23:07 +0000

This just hit our school server and sent out bogus print jobs. I found it in in all my shared network drives.

Comment on BOOT.VBS by Sushil Jain

Sushil Jain — Wed, 21 May 2008 03:56:23 +0000

Run Process Explorer and Kill the Following Processes:
wscript.exe
dxdlg.exe

Run Autoruns and under logon tab, remove
C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\boot.vbs
Search for entries named wproxp and remove it

Remove the following files from your PC:
C:\WINDOWS\system32\dxdlg.exe
wproxp.exe (Most probably in your system32 or windows folder)
C:\WINDOWS\system32\boot.vbs

But Remember If Ypu remove wscript.exe your all .VBS files will stop working because wscript.exe It is a windows application for executing vbs files.

Thanks
Sushil Jain

Comment on BOOT.VBS by vinoth

vinoth — Mon, 19 May 2008 06:37:37 +0000

Windows script host

Script : C:\windows\system32\boot.vbs
Line : 1
Char : 10
Error : Expected end of statement
Code : 800A0401
S0urce : Microsoft VBScript compilation error

THE ABOVE PBM IS APPEARED IN MY MACHINE, WHEN BOOTING TIME PLZ HELP TO SOLVE THE ABOVE PBM

Comment on BOOT.VBS by dhakal

dhakal — Sat, 17 May 2008 18:52:35 +0000

dear sir,
cannot find script file c:\windos\system32\boot.vbs
please tell me how to solve this problem.

Comment on MNSFramework.exe by Rinie Huijgen

Rinie Huijgen — Thu, 15 May 2008 14:47:39 +0000

MNSFramework.exe is part of Mobile Net Switch. The exe runs as a service and is digitally signed.

The installer of MNS also includes a description for the service “Framework used by Mobile Net Switch”. Please see the MNSFramework service using “services.msc”

Kind reagrds,
R. Huijgen
(one of the authors of Mobile Net Switch and MNSFramework.exe)

Comment on regsvr.exe by tajudeen

tajudeen — Thu, 15 May 2008 11:02:20 +0000

How to remove new folder exe or regsvr exe or autorun inf virus

Comment on regsvr.exe by Sachin

Sachin — Thu, 15 May 2008 06:58:52 +0000

This virus is know popularly as regsvr.exe virus, or as new folder.exe virus and most people identify this one by seeing autorun.inf file on their pen drives, But trend micro identified it as WORM_DELF.FKZ. It is spreading mostly using this pen drives as the medium.

So let’s start the process off reclaiming the turf that virus took over from us.
1. Cut The Supply Line
a. Search for autorun.inf file. It is a read only file so you will have to change it to normal by right clicking the file , selecting the properties and un-check the read only option
b. Open the file in notepad and delete everything and save the file.
c. Now change the file status back to read only mode so that the virus could not get access again.
d.
e. Click start->run and type msconfig and click ok
f. Go to startup tab look for regsvr and uncheck the option click OK.
g. Click on Exit without Restart, cause there are still few things we need to do before we can restart the PC.
h. Now go to control panel -> scheduled tasks, and delete the At1 task listed their.
2. Open The Gates Of Castle
a. Click on start -> run and type gpedit.msc and click Ok.
b.
c. If you are Windows XP Home Edition user you might not have gpedit.msc in that case download and install it from Windows XP Home Edition: gpedit.msc and then follow these steps.

d. Go to users configuration->Administrative templates->system
e. Find “prevent access to registry editing tools” and change the option to disable.
f.
g. Once you do this you have registry access back.
3. Launch The Attack At Heart Of Castle
a. Click on start->run and type regedit and click ok
b. Go to edit->find and start the search for regsvr.exe,
c.
d. Delete all the occurrence of regsvr.exe; remember to take a backup before deleting. KEEP IN MIND regsvr32.exe is not to be deleted. Delete regsvr.exe occurrences only.
e. At one ore two places you will find it after explorer.exe in theses cases only delete the regsvr.exe part and not the whole part. E.g. Shell = “Explorer.exe regsvr.exe” the just delete the regsvr.exe and leave the explorer.exe
4. Seek And Destroy the enemy soldiers, no one should be left behind
a. Click on start->search->for files and folders.
b. Their click all files and folders
c. Type “*.exe” as filename to search for
d. Click on ‘when was it modified ‘ option and select the specify date option
e. Type from date as 1/31/2008 and also type To date as 1/31/2008
f.
g. Now hit search and wait for all the exe’s to show up.
h. Once search is over select all the exe files and shift+delete the files, caution must be taken so that you don’t delete the legitimate exe file that you have installed on 31st January.
i. Also selecting lot of files together might make your computer unresponsive so delete them in small bunches.
j. Also find and delete regsvr.exe, svchost .exe( notice an extra space between the svchost and .exe)
5. Time For Celebrations
1. Now do a cold reboot (ie press the reboot button instead) and you are done.
I hope this information helps you win your own battle against this virus. Soon all antivirus programs will be able to automatically detect and clean this virus. Also i hope Avast finds a way to solve this issues.
As a side note i have found a little back dog( winpatrol ) that used to work perfectly on my old system. It was not their in my new PC, I have installed it again , as I want to stay ahead by forever closing the supply line of these virus. You can download it form Winpatrol website.
UPDATE : Avast Boot Time Scheduling

Check out How to stop regedit, task manager and msconfig from closing automatically if your regedit or msconfig closes automatically.

Comment on MarioForever.exe by ALI SMADI

ALI SMADI — Mon, 12 May 2008 19:56:02 +0000

this virus hit one of the computers on our network (we have about 100 computer, 30 VPN network remote locations), its bugging more than hurting… it keeps sending printing jobs to all the newtork printers all over the VPN netowrk which is annoying and waste of money, just make sure u don’t run it when it hit one of the computers, it copies itself to the root directory of each network drive. format that computer and it will be gone from the whole network.

Comment on SSCVIHOST.exe by Arunan M

Arunan M — Sat, 10 May 2008 10:02:48 +0000

i need the soloutiion for the removal of SSCVIHOST.exe virus

Comment on BOOT.VBS by Skan

Skan — Wed, 07 May 2008 13:05:26 +0000

Thanks!

Comment on BOOT.VBS by atheeq

atheeq — Tue, 06 May 2008 09:32:00 +0000

Dear sir,
In my pc when its switch on the system c:/window/system32/boot.vbs is missing is showing … i run my antivirus in that i was detected and i was deleted also but still showing the same message… plz help me…

Comment on tazebama.dll by peter

peter — Mon, 05 May 2008 14:43:00 +0000

please send me the remedy

Comment on BOOT.VBS by Mukesh Kr. Dwivedi

Mukesh Kr. Dwivedi — Fri, 02 May 2008 08:35:36 +0000

Dear sir,
I have one problem with my computer and it is, whenever i turn on my computer it comes up with the following two message which remains intact until i turn it off and it is:
1) cannot find script file c:\windos\system32\boot.vbs
Please help me soon

Comment on regsvr.exe by Shinoy

Shinoy — Tue, 29 Apr 2008 18:36:19 +0000

How to remove new folder exe or regsvr exe or autorun inf virus

Comment on BOOT.VBS by ratan shah

ratan shah — Sat, 26 Apr 2008 08:42:00 +0000

Please help me to get rid of this problem.

Waiting for your reply.

Sincerely,

Comment on BOOT.VBS by Sneha

Sneha — Fri, 25 Apr 2008 06:35:46 +0000

dear sir,
cannot find script file c:\windos\system32\boot.vbs
please tell me how to solve this problem.

Comment on BOOT.VBS by kk

kk — Fri, 18 Apr 2008 05:40:10 +0000

how to remove the virus form my computer?

Comment on rundll.exe by PiyushLabs

PiyushLabs — Sat, 29 Mar 2008 11:14:49 +0000

rundll.exe is supportive file for regsvr.exe virus.
its is a new virus that keep a complete track of everything being done on comp. plus, it takes snap shot evry 30 sec and saves it.

Comment on BOOT.VBS by Gaurav Sharma

Gaurav Sharma — Fri, 28 Mar 2008 06:26:11 +0000

Comment on iloveher.exe by gx of zabarte road caloocan city

gx of zabarte road caloocan city — Wed, 26 Mar 2008 01:26:55 +0000

sir thanks for the help ..it really help me a lot to remove the iloveher.exe on my pc..acctually im a csr here at the cafe and im so worried if all of our pc’s will be infected by this rude infections….

THANKS A LOT ! ! !

Comment on tazebama.dll by mahammad

mahammad — Mon, 24 Mar 2008 09:17:46 +0000

i need removal tool for tazebama virus

Comment on azkaban.bat by webmaster

webmaster — Sun, 23 Mar 2008 13:28:55 +0000

1. Please see FlashDrive Worm Removal
http://www.precisesecurity.com/tools-resources/adware-tools/flashdrive-worm-killer/

Comment on azkaban.reg by webmaster

webmaster — Sun, 23 Mar 2008 13:28:36 +0000

1. Please see FlashDrive Worm Removal
http://www.precisesecurity.com/tools-resources/adware-tools/flashdrive-worm-killer/

Comment on azkaban.vbs by webmaster

webmaster — Sun, 23 Mar 2008 13:28:13 +0000

1. Please see FlashDrive Worm Removal
http://www.precisesecurity.com/tools-resources/adware-tools/flashdrive-worm-killer/

Comment on BOOT.VBS by dbrock

dbrock — Sun, 23 Mar 2008 04:25:12 +0000

Dear sir,
my problem is that, when i boot my laptop. the laptop starts easily and come to the working mode. but one message box is appear and it contains cannot find “…\administrator\boot.vbs”. When i close this diolog box again same message is appear repeatitatively.
please help me to remove this problem.
thanks
pls as soon as sent replay

DBROCK

Comment on BOOT.VBS by Nrvn

Nrvn — Sun, 23 Mar 2008 02:44:06 +0000

DO NOT REMOVE wscript. It is a windows application for executing vbs files.

u forgot this line PG!!

Comment on BOOT.VBS by Luna Ghimire

Luna Ghimire — Tue, 18 Mar 2008 18:01:45 +0000

Please help me to get rid of this problem.

Waiting for your reply.

Sincerely,
Rajesh Chaudhary

Comment on BOOT.VBS by jeet yadav

jeet yadav — Tue, 18 Mar 2008 06:56:11 +0000

Dear sir

I am really get rid of viruses boot.vbs
Anyway i need to elimante this viruses from my computer.Please assist me the way…..

Thanks

Jeet

Comment on BOOT.VBS by bishal

bishal — Sun, 16 Mar 2008 09:25:24 +0000

I could locate the file boot.vbs from the regestry but cannot delete dxdlg.exe from the system32.how do i do it.Please help and advise,as this problem has been causing a lot of hassle whereby my antivirus doesnt provide the solution.

Comment on BOOT.VBS by bishal

bishal — Sun, 16 Mar 2008 09:17:30 +0000

thought I could find the file boot.vbs from the regestry and delete but cannot delete the exe dxdlg.exe…what standard procedure is there to follow and get rid of the virus boot.vbs.Please advise

Comment on trojandownloader.exe by webmaster

webmaster — Sun, 16 Mar 2008 08:16:13 +0000

1. Please use SmitfraudFix to remove this threat. http://www.precisesecurity.com/tools-resources/adware-tools/smitfraudfix/

Comment on BOOT.VBS by Rajesh Chaudhary

Rajesh Chaudhary — Tue, 11 Mar 2008 23:11:29 +0000

Please help me to get rid of this problem.

Waiting for your reply.

Sincerely,
Rajesh Chaudhary

Comment on SSVICHOSST.exe by michel

michel — Tue, 11 Mar 2008 15:07:42 +0000

bonjour, nous vous demandons de nous parvenir si c’est possible la solution du “SSVICHOSST.exe” .
merci

Comment on iloveher.exe by Allan

Allan — Mon, 10 Mar 2008 13:37:31 +0000

below is the simple procedure in removing say no drug display or iloveher.exe

booth computer to safe mode. do this by pressing f8 when the computer is restarting.

type cmd on run, it will bring to command prompt

1. type attrib -s -h -r iloveher.exe then enter
2 .type attrib -s -h -r autorun.inf then enter
3 .type del iloveher.exe then enter
4 .type de autorun.inf the enter

do this on the all the drives as well as at c:\windows/system32

then type msconfig to run command

uncheck the iloveher.exe on the start-up

Comment on Funny UST Scandal.avi.exe by jitender kumar

jitender kumar — Sun, 09 Mar 2008 11:42:15 +0000

Remove Funny Scandal without any antivirus

Remove completely funny ust scandal avi.exe(virus) from your hard disk without using any antivirus and just installing fresh copy of window. This is done by jitender kumar.
For any problem regarding viruses contact me on my e mail id

E-mail ID: jka.cool@gmail.com
jka_cool@yahoo.co.in

Jitender kumar
MCA (master of computet applications) (student of software engineering)
MIET Engineering college, Meerut
UP, INDIA

Funny ust scandal.avi.exe run thses files :
1.Funny.exe
2.Killer.exe
3.Smss.exe or xmss.exe
If your computer corrupted with funny with xmss.exe then you :

1.can’t open Command prompt by run cmd command
2.can’t install most of softwares
3.can’t open task manager
4. can’t restore your system
5.can’t open folder options
6.can’t see hidden files and folders

And if funny with smss.exe then you are in some better condition . ok now apply this steps and give me reply and your experience on my e mail id and you can be my friend. Ok best of luck
so for removing this virus you must install windows at one time and following these steps you will remove this virus.

1. install a fresh copy of window by formatting any drive.

2. do not open any drive(after installation of window) before removing virus from your system.

3. make a restore point

4.in folder options
(a).check mark before shows hidden files and folders.
(b).unmark the option hide protected operating system files ( recommended )

5. after applying this options check one more time that they are applied or not they must be applied-shows virus is not corrupted your windows

6.open search and select all files and folders and mark on more advance options (search hidden files and folders,search system folders, search subfolders)

7. search autorun file from all drives(just within drive) and delete them, after deleting these files right click on each drive and check there is autorun option or not, it shows virus in your drive now restart your system the autorun option will not be there in right click on drives

8. now open drive and delete virus like funny ust scandal, smss.exe, xmss.exe

9. now again check the folder option selected option must be applied if they are not applied or it does not show hidden files and folders it means you did any mistake by following these steps and virus corrupt your windows, now restore your system and repeate from step 4.

10.delete this viruses from the folder RECYCLER in every drive, this virus must be at least one folder in recycler folder of each drive .

11. from folder option unmark the option hide protected operating system files.

OR
another solution for removing this virus

first follow above 4 steps and then try this trick

-open media player and from file option select open
-select type of file as “any file”
-and open your all drive one by one and delete autorun,funny,smss,xmss files from your all drive
then restart your system
and check virus on your computer by right clicking on all drive and if their is autoplay or autorun option then virus is their in your drive othervise virus is removed then use your full system
then follow 10 and 11 step.

I am a student and struggling for brighty career in any IT company so please must reply me your experience about viruses if you feel good by my solution. It will motivate me.

Comment on BOOT.VBS by Suvendra Raj Lamichhane

Suvendra Raj Lamichhane — Wed, 05 Mar 2008 07:21:55 +0000

In my PC. virus are not detected even after using updated scanner but the blank floppy drive is always active at an interval of thirty seconds. This makes the IO unnecessarly bussy. How can I solve the problem

Comment on iloveher.exe by FE

FE — Tue, 04 Mar 2008 08:29:29 +0000

thanks, i tried this to my usb flash disk and it successfully removed the viruses. But it won’t worked in my hard disk. Then, the only way to removed the iloveher.exe and autorun.inf is to format.

Comment on iloveher.exe by helga

helga — Tue, 04 Mar 2008 05:38:09 +0000

Sir, I can’t open my task manager. I followed the procedure you’ve stated above. Im using vista on my laptop. Is there any way I can go to process?

Comment on iloveher.exe by henry

henry — Mon, 03 Mar 2008 15:39:44 +0000

how about in Vista?! i can’t open my task manager.. I’ve done everything. I’m hoping you could help me

Comment on BOOT.VBS by xXx Neo

xXx Neo — Wed, 27 Feb 2008 07:35:34 +0000

Ok it works,
Additional thinks to do:
1. you need to remove wscript.exe in the Shell key in [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] too.

2. You need to use command prompt to unhide and delete the boot.vbs
commanded needed to del boot.vbs :=
a) c:\> dir /ah /as /s boot.vbs to find boot.vbs in your computer
b) attrib -h -s *.* inside the folder where boot.vbs is located
c) del boot.vbs

Happy Virus Hunting..