NA DISABLE ANG AKONG TASK MANAGER

[pridi]

---

murag rontokbro man guro na, try daw pa run ug cmd from start->run, or regedit ba kaha... kung mo run, aw, pwede nga dili virus....

[joshueTM]

ngana sad akoa problem, salamat kay naa nag post ani. will try your advices mga sir.

[cyrus-kanca]

mga bro ur system na igo ug SCVHOST virus or Win32/Autorun.R.worm.

Primary Symptoms:

- YM sends message with links to infected site
- Disable Task Manager
- Disable Folder Option
- Disable Registry Editing
- Disable Changes in MSCONFIG

the virus is just an executable file that execute and act as an administrator and disable everything that prevent it(like enable to show extension filename on folder option).

Any anti-virus cannot fix that problems they can only heal it and when you restart the .exe file will restore. you can delete manually but not all na gi activated niya ma recover.

How to Remove It

OK here we go, you must follow this step on how to remove this virus in manually method:

- Restart your PC and press F8 and select the option Safe Mode Command Prompt Only
- And after you log-in the command prompt you must log-in as Administrator.
- Type cd C:\windows\system32
- Type dir /ah, to display all hidden files on this directory folder. You will see the following files which is used by the virus to spread itself: AUTORUN.INI, BLASTCLNNN.EXE, and SCVHOST.EXE
- Type ATTRIB -H -R -S SCVHOST.EXE
- Type ATTRIB -H -R -S BLASTCLNNN.EXE
- Type ATTRIB -H -R -S AUTORUN.INI
- Type DEL SCVHOST.EXE
- Type DEL BLASTCLNNNN.EXE
- Type DEL AUTORUN.INI
- Type CD\
- Type ATTRIB -H -R -S AUTORUN.INF
- Type DEL AUTORUN.INF

You are almost done, reboot your PC you may seat back and relax.. while loading...

Go Start Menu and click the Run and type the REGEDIT command. Take note guys before make any changes into your Registry Editor you must make a full back-up to your registry to avoid system errors.

Look the location entry:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run, if you see an entry Yahoo! Messengger (it’s spelled like this) with a value c:\windows\system32\scvhost.exe, Delete this entry.

Look the location entry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, in the entry named: SHELL, a value = Explorer.exe,SCVHOST.EXE. Edit this value, delete the SCVHOST.EXE only and the value must be Explorer.exe. Once you delete all this value, your computer will not login anymore.

OK we are now done.. Please Restart your PC now and Enjoy!!! Thank you and hope this tips will help for everyone.


P.S> If you want to sit back and relax and let me do the dirty works just pm me i'll just charge a little. this include enabling all those who were disabled. thanks again

[cyrus-kanca]

or else pang old school, back up ur files and REFORMAT your pc. =)

[pridi]

or else pang old school, back up ur files and REFORMAT your pc. =)

pwede, just make sure lang you have all the necessary installers....

[naratol_namo_xb]

mga bro ur system na igo ug SCVHOST virus or Win32/Autorun.R.worm.

Primary Symptoms:

- YM sends message with links to infected site
- Disable Task Manager
- Disable Folder Option
- Disable Registry Editing
- Disable Changes in MSCONFIG

the virus is just an executable file that execute and act as an administrator and disable everything that prevent it(like enable to show extension filename on folder option).

Any anti-virus cannot fix that problems they can only heal it and when you restart the .exe file will restore. you can delete manually but not all na gi activated niya ma recover.

How to Remove It

OK here we go, you must follow this step on how to remove this virus in manually method:

- Restart your PC and press F8 and select the option Safe Mode Command Prompt Only
- And after you log-in the command prompt you must log-in as Administrator.
- Type cd C:\windows\system32
- Type dir /ah, to display all hidden files on this directory folder. You will see the following files which is used by the virus to spread itself: AUTORUN.INI, BLASTCLNNN.EXE, and SCVHOST.EXE
- Type ATTRIB -H -R -S SCVHOST.EXE
- Type ATTRIB -H -R -S BLASTCLNNN.EXE
- Type ATTRIB -H -R -S AUTORUN.INI
- Type DEL SCVHOST.EXE
- Type DEL BLASTCLNNNN.EXE
- Type DEL AUTORUN.INI
- Type CD\
- Type ATTRIB -H -R -S AUTORUN.INF
- Type DEL AUTORUN.INF

You are almost done, reboot your PC you may seat back and relax.. while loading...

Go Start Menu and click the Run and type the REGEDIT command. Take note guys before make any changes into your Registry Editor you must make a full back-up to your registry to avoid system errors.

Look the location entry:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run, if you see an entry Yahoo! Messengger (it’s spelled like this) with a value c:\windows\system32\scvhost.exe, Delete this entry.

Look the location entry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, in the entry named: SHELL, a value = Explorer.exe,SCVHOST.EXE. Edit this value, delete the SCVHOST.EXE only and the value must be Explorer.exe. Once you delete all this value, your computer will not login anymore.

OK we are now done.. Please Restart your PC now and Enjoy!!! Thank you and hope this tips will help for everyone.


P.S> If you want to sit back and relax and let me do the dirty works just pm me i'll just charge a little. this include enabling all those who were disabled. thanks again

thank kau pro... i think it'll help.....

[alain]

^^