Joke.Blusod
Joke.Blusod is a screen-saver application attempting to play tricks on affected computer. Joke.Blusod will exhibit various Blue Screen Of Death (BSOD) and system failure messages once executed. This potentially unwanted application may invade the computer in several ways; file-sharing networks, spam email messages, instant messaging applications and malicious web sites.
Damage Level: High
Systems Affected: Windows 9x, 2000, XP, Vista
How to Remove Joke.Blusod
REMOVAL TOOL:
Adware or unwanted application are programs that are added to system using deceiving process, in this case users perceive the software as beneficial with no cruel purpose . For this type of threat, effective solutions would be Malwarebytes Anti-Malware.
MANUAL REMOVAL OF Joke.Blusod:
1. If an anti-virus program is present, update the definition file.
2. Reboot Windows in Safe Mode
- After turning on the power, press F8 on the keyboard.
- From the menu, select Safe Mode.
3. Run a full system scan and clean/delete all infected file(s).
4. Delete/Modify any values added to the registry if present.
- To edit the registry, click on Start. Search or Run regedit.exe.
Note: For a complete guide on Safe Mode and Registry Editor, please see tutorial links on the sidebar.
5. Exit registry editor and restart Windows.
ADDITIONAL TOOLS AND PROGRAMS:
Scan with Portable Antivirus:
Free McAfee Portable Antivirus called Stinger can be downloaded also to eliminate presence of viruses, spyware, adware and malware.
Technical Details and Additional Information:
This potentially unwanted program will display random stop error that mimics the look of Windows BSOD. It contains the following message:
A problem has been detected and Windows has been shutdown to prevent damage to your computer.
BOGUS_DRIVER
If this is the first time you’ve seen this stop error screen, restart your computer. If this screen appears again, follow these steps:
Check to make sure that any new hardware or software is properly installed. If this is a new installation, ask your hardware or software manufacturer for any Windows updates you might need…
Malicious Files Added by Joke.Blusod:
%System%\[RANDOM NAME].scr
File Location for Windows Versions:
- %System% for all versions of Windows it is located under C:\Windows\System32
Associated Windows Registry Entries:
HKEY_CURRENT_USER\Software\Sysinternals\BlueScreen
precisesecurity
Jul 08, 2008 @ 14:34:29
1. Download removal tool from this page and save it on your Desktop.
2. After downloading, double-click on to install the application.
3. Follow the prompts and install as “default” only
4. If it prompts to update the database after installation, please proceed.
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished, click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart Windows.
D.Noorohff
Jul 13, 2008 @ 11:21:14
Hope this will help me, I am desperate now.
kurg
Jul 24, 2008 @ 19:06:17
I usually don’t go for these recommendations, they usually advise you to download software that will get you in deeper, but this one is time well spent. the download is free (really) and absolutely DID detect and destroy joke.blusod and all of its nasty little side effects with ZERO complications, Thanks!!!
charlie
Aug 02, 2008 @ 03:31:05
It worked. Thanks to all!
Murky Max
Aug 04, 2008 @ 10:22:27
I hope this eventually works. Installation refused to take place the first time but after downloading a second time, it was successful. The scan runs on well with a dozen infections found by the program. I just hope cleaning takes place successfully.
DLH
Aug 15, 2008 @ 19:59:59
I went through the same problem with Trojan.Blusod and Joke.Blusod. I followed got rid of it with Symantec, but the instructions to get for regedit did not match up with my settings. You will notice that in COntrol Panel Display, that you are now missing the screen saver and wallpaper tabs. Anyone now how to get them back? I assume in the regedit, but which settings?
Sherylee
Aug 16, 2008 @ 04:07:21
Hi,
I was having the same problems with my screen saver and background, but I found this info and it works…
click Start, Run, enter regedit, then go to
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Delete the following values
“noDispScrSavPage” and “nobackground”
It will at least allow you to get your screen saver and background back again when you go into control panel, display.
The only problem I have been having, is soon as I restart my computer, the same problem happens and I have to go in and delete these again.
I think I have it narrowed down to blphcr8wj0eadr.scr_old which is in my windows, system32 folder, but won’t let me delete it.
any help from anyone with something like this? my Symantec scans say
joke.blusod
trojan.blusod and
Trojan horse
Sherylee
Aug 16, 2008 @ 04:54:30
I have figured out some more info you might find helpful. I had mentioned before how it still messes up every time I restart my computer, and I have now found that fix as well.
- start and run regedit
- go to HKEY Local machine, software, Microsoft, windows, current version, run
- delete the line that has lphc35dj0erc1.exe (this is the item that is telling it to run the screen saver and background every time windows starts.
I am now running AVG to try and get rid of this mess I’m in for good. Have been dealing with this for a few days now, but seems like we have figured out the screen saver issue, hopefully it continues with progress instead of more problems. Hope this helps you!
andra
Aug 16, 2008 @ 18:46:55
DLH, try like this ( works for me)
from http://www.precisesecurity.com/blogs/2008/06/26/antivirus-xp-2008/
” Once you have the virus deleted you will notice you are missing the Screensaver and Background Wallpaper TABS in Display Properties. This will prevent you from removing that annoying message or the modified Wallpaper. Here is how you get the TABS back to be able to get rid of the message or stupid Wallpaper:
Manual Steps Using Windows XP Registry…….. be careful
1. Click Start and then Run.
2. Type regedit in the Run dialog box & Click OK.
3. Navigate to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
4. Right-click NoDispScrSavPage to select Modify.
Change the value to 0.
5. Do exactly the same with the NoDispBackgroundPage entry
6. Go out of the Registry and Restart your Computer
*************************************
In Addition this Viral Abomination also goes and disables your System Restore Options
Here are Instructions to correct this:
1. Go to the System Registry (Start Run, type in: regedit and click OK)
2. Highlight My Computer, then under Edit in the File Menu select Find
3. Type RestoreOpenIsSafe and click on Find Next
4. At the Fist Instance of the Entry, Right-Click on it and select Modify………. change the value to 1 (if it is not 1 already, Click OK, then press the F3 Button to search for more of the same Entry
5. At the 2nd Instance of the Entry, do the same
6. There should only be 2 Instances of the Entry but to make sure that you press F3 again and modify any additional Instances of the Entry until you are through the Registry.
7. Go out of the Registry and Restart Windows.
Now your Restore Systems should work again.
Regards
Rudi Geldenhuys
Legal Easy CC – Computer Consultants
Gauteng Province, South Africa “
Shubha
Aug 18, 2008 @ 13:47:35
I have the same virus in my computer. I am successful in getting my desktop properties back, but somehow my antivirus software are not working properly. I have Kaspersky and Google’s Norton anti virus in my computer. When I try to scan my machine, it just gives up saying scan failed. Signatures corrupted, I am not able to update the signatures too. Any idea why this is happening?
Nick F
Aug 20, 2008 @ 01:32:48
I thought for sure this was probably another scam that was trying to hook you into buying a AV program that doesn’t do the job. I know this from my own experience. The last time this happened I had my entire hard drive reformatted to get rid of the problem. Not this time! This software did for free what Symantec couldn’t
Daren Wang
Aug 20, 2008 @ 02:19:34
Powerful tool to remove Trojan.Blusod and Joke.Blusod. Download, install, update, full scan, remove and reboot. Done! Very happy!
skyteck
Aug 20, 2008 @ 04:49:46
Hear ya Nick F… damn fake warning worms I hate them almost no anti-virus can remove them eithere they fail or they just don’t detect nothing. this is my second time infected with one of these damn fake warning worms/Trojans the first time my PC broke down I had to reformat and re-install everything… luckily I found this tool and it worked really nice and quick with out having to buy anything…10/10
TEE
Aug 20, 2008 @ 07:12:53
Thank you very much
mmagg
Aug 20, 2008 @ 18:32:18
Thank you, I too was skeptical but this worked for me. I finally got through to Symantec right when I was ready to run MalwareBytes and they led me through a bunch of complicated steps that did not work! After a reboot it came back. Malwarebytes solution got rid of it quickly and simply. Sure glad I just sent Symantec $3000.00 for this years subscription.
Bernadette
Aug 21, 2008 @ 18:44:10
Been infested for over a week. I think the Malwarebytes finally did the trick. Symantec, Ad-aware, fit-it, all useless.
David
Aug 21, 2008 @ 23:55:30
Picked up this nasty infection today. Researched options and decided to use Malwarebytes’ Anti-malware. Worked like a charm. One shot, one kill. Symantec’s products couldn’t even detect the extent of the infection, much less remove. By the way, whoever suggested that Malwarebytes’ Anti-malware is malware is mistaken or misguided. It is listed and recommended as a solution on numerous ant-malware and security forums.
Peter
Aug 22, 2008 @ 15:15:08
Hope this work. I am so desperate. Thank you God for making this program.
Steven H
Aug 23, 2008 @ 03:58:13
I have been living in hell with this virus for three days. Today I Google into here and found the advice about the Malwarebytes removal tool. It took a bit over 2 hours to scan my entire system, found 20 infections, removed them all and my system is now golden. Thank you.
Peace,
Steven
Ed
Aug 23, 2008 @ 09:34:09
Same success story here. I got this Trojan from a Font web site, of all places. It was picked up by Symantec, but not removed successfully. Googled for a solution and found it here. Thanks all.
Seer
Aug 23, 2008 @ 20:12:12
Got this thing a few days ago, and it had been constantly turning my desktop white. Symantec noted it, but nothing I tried with it could get rid of it. I downloaded the program and it worked on the first scan. Really helpful. Thanks.
tankdc
Aug 24, 2008 @ 17:07:01
Malwarebytes’ Anti-Malware (mbam-setup.exe) totally worked. It restored my wallpaper tab. My Symtantec Antiviris could not get rid of it. Malwarebytes did.! Thanks.
Jerlo
Aug 24, 2008 @ 17:37:09
Tankdc save it all for me. It also gave me back sound on one of the sites that was just recommended to me, along with the screen background tab. I, too, had Symantec Antivirus and it said it deleted the viruses, but they just came back and it didn’t repair the registry at all. I just hope it lasts.
Nemo
Aug 25, 2008 @ 03:31:12
Help I cannot seem to run Malwarebytes’ Anti-Malware mbam_setup.exe will not execute all I get an error stating “the setup files are corrupted”
Nemo
Aug 25, 2008 @ 06:22:35
Problem solved. Burned Malwarebytes’ Anti-Malware mbam-setup.exe to a disc on another computer and loaded it that way. BTW this totally kicks. It found and removed/resolved more than just Joke.Blusod on my system, it detected 41 malicious programs that my Norton didn’t even detect, not to put Norton down just saying it covered what Norton missed.
Casstw
Aug 25, 2008 @ 19:08:33
I was infected with joke.blusod last night. After searching around for solutions, I downloaded the suggested program Malwarebytes and it found about 10 issues and deleted them but now when I reboot all I get is a blank blue screen. Also, I can’t even login in safe mode. Any more suggestions?
vinnyv07
Aug 26, 2008 @ 00:09:04
I already lost a laptop to this nasty malware infection. I was using my work laptop and I went to a site for free animations. AntivirusXP and Joke.blue came up for installation. I knew I was in trouble. I restarted my computer and Symantec found joke.blue and told me to reboot but it was always back to square one when I restarted the laptop. I did a search and found this page and took a chance on this program. It found 12 infections when Symantec found only 2. I restarted the laptop and it started again with a blue screen. I restarted in safe mode and then shut down and restarted again and all is good now. No more blue screen and no more Antivirus.XP installation on startup and no more Joke.Blue. My screen saver settings are back the way they should be. I was worried about the blue screen when I started up, but I was able to get in safe mode and restart again. Thank You for a great program. I will be donating if all goes well. I am never going to search for animations again.
Pat
Aug 26, 2008 @ 20:59:42
All I found this website and used the advise and got back to blue screen etc and ran the malaware bytes fix. THe only problem is the virus messed with my windows connections and I thought that was my last thing to fix. It went two days being fine and has re-invented itself again with windows error screens, etc and the above malware that I used to clean it the first time can’t find anything this time through … suggestions
joe
Aug 27, 2008 @ 01:31:10
Thanks! I needed a solution for this!
Bigdogs
Aug 27, 2008 @ 02:19:07
I followed the advice of Sherylee and it worked the first time. My experience with these types of viruses is that the recommended removal tool only gets you in deeper. If you really want to fix this and make it go away for good follow Sherylee’s instructions. It’s easy and you don’t have to risk downloading anything that probably contains additional spy/malware.
Pat
Aug 27, 2008 @ 16:40:09
I did Sherylee’s instructions but something else has it keep coming back.
Bill
Aug 28, 2008 @ 17:13:46
Ditto…..Powerful tool to remove Trojan.Blusod and Joke.Blusod. Download, install, update, full scan, remove and reboot. Done! Very happy!
Mikey77
Aug 28, 2008 @ 19:25:47
I wonder why the security Certificate for this program cannot be verified, before you Run it?
AP
Aug 29, 2008 @ 08:06:39
I have discovered that I have the Joke.Blusod virus on my PC. I just downloaded the file and tried to run it and I got this error:
Run-time error ’372′;
Failed to load control ‘vbalGrid’ from vbalsgrid6.ocx. Your version ofvbalsgrid6.ocx may be outdated. Make sure you are using the version of the control that was provided with your application.
Any input given, would be greatly appreciated!
Rick H.
Aug 29, 2008 @ 14:09:27
Awesome! Just spent the entire day trying to use Norton 360 (what a joke). Found your responses and ran the Anti-Malware and got it cleaned up. Thanks! Will click the “Donate” button after I submit this comment!
Take Care!
Al Khan
Sep 02, 2008 @ 00:02:44
Excellent – fixed all the problems ..
kev
Sep 15, 2008 @ 21:53:47
Okay, I’m in a rut. A little over a week ago I got the joke blue virus and after a several runs of McAfee and Defender the external evidence of it seems to have been ripped apart and deleted. But, I still have several system problems – slow, uncertain start-up (generally 2 out of 3 times everything locks up when I get to the desktop screen), and my browsers have certainly been hijacked – or, I don’t know what’s technically happening, but my web-searches are diverted, and many pages simply don’t load. Most frustrating is that many of the pages that refuse to load are those that link to the free anti-spyware programs that folks have been recommending to remove this bugger. Eithere that, or it seems like if I do manage to download the set-up program for something like MalwareBytes, I get an error that the file is corrupted. It all just seems too fishy to me. I’m not highly tech inclined so I would appreciate any feedback as to what’s going on with my system and how I might be able to successfully defend it. thanks!
Brandon
Sep 19, 2008 @ 22:02:57
This makes a nice asset to go along with Symantec. This program can actually find these malicious software and quarantine them successfully, unlike Symantec. It did quarantine joke.blusod and 11 other sneaky malware on my computer!
Allen D
Oct 11, 2008 @ 03:06:24
Malware got things up and running but I’m still starting and running slow. (5 minutes to start up)
After a while, the screen goes black and I have to restart. Any suggestions on the slowdown?
Kellie D
Oct 16, 2008 @ 01:03:26
Has anyone had a computer completely fail after this virus appears? My son’s laptop apparently had the virus and he shut down the computer. Now, we cannot power it on at all. I cannot F8 into safe mode and we do not have a restore CD for this machine (Windows XP Pro). Any suggestions?