Kill The Virus!
This lens is all about how to remove the the Nude SSG Sex Scandal (or sowars.vbs) Virus in case your Best Antivirus software doesn't work
The Nasty Virus
a look in the sowars.vbs virus
Nude SSG Sex Scandal Virus (Sowars).Vbs Virus is a virus which usually infects Windows-based computers which can be transported to any removable drives.
Here are some of the symptoms if your PC is infected by this virus:
1. You might wonder why I cant open my drive c:drive, removable medias, flash etc. by just double clicking the mouse. you might get this erro (.vbs error not found)
2. Your computer runs slower that a normal the way it use to.
3. It wont boot into Windows Screen
4. Unable to remove NUDE SSG SEX SCANDAL.vbs on your flash drive.
5. Some missing icons on your dektop, start menu, task bar, my documents, etc..
6. Even turn off your sysmtem restore application wont help just to get rid of this work
7. Unable to format flash drives, MMC card.
7. Trying a command prompt wont even help to delete this file.
8. This worm normaly get his self to build his own nest to your REGISTRY which very a common issues.
9. Always turn off your System Restore option to prevent your PC from being infected your files
Here are some of the symptoms if your PC is infected by this virus:
1. You might wonder why I cant open my drive c:drive, removable medias, flash etc. by just double clicking the mouse. you might get this erro (.vbs error not found)
2. Your computer runs slower that a normal the way it use to.
3. It wont boot into Windows Screen
4. Unable to remove NUDE SSG SEX SCANDAL.vbs on your flash drive.
5. Some missing icons on your dektop, start menu, task bar, my documents, etc..
6. Even turn off your sysmtem restore application wont help just to get rid of this work
7. Unable to format flash drives, MMC card.
7. Trying a command prompt wont even help to delete this file.
8. This worm normaly get his self to build his own nest to your REGISTRY which very a common issues.
9. Always turn off your System Restore option to prevent your PC from being infected your files
The Tools Needed
Here are the tools needed to remove the virus
xp_taskmgrenab.exe - This small GUI (Graphical User Interface) utility allows you to easily enable or disable Task Manager. If your PC is infected, it disables your Task Manager so that you cannot terminate the Wscript.exe process.
RRT (Remove Ristrictions Tool) - A tool to re-enable Ctrl+Alt+Del, Folder Options and Registry tools.
Backup Tool:
xp_emegencyutil.exe - This small VB 6 utility will create a usable backup copy of Taskmgr.exe, MSConfig.exe and Regedit.EXE in a new folder, called C:\EmergencyUtils. The new copies will be named Copy_of_Taskmgr.exe, Copy_of_MSConfig.exe and Copy_of_Regedit.com.
These programs are extremely helpful, and usually necessary in helping to rid your computer of a viral infection. Many virus programs will intercept these programs, based on their original file name, and prevent them from running. The alternate copies will not encounter this problem. Simply navigate to the C:\EmergencyUtils folder and double click the file you need to run.
You can download all of these tools from the Link Below:
Nude SSG Virus Removal Tools.
RRT (Remove Ristrictions Tool) - A tool to re-enable Ctrl+Alt+Del, Folder Options and Registry tools.
Backup Tool:
xp_emegencyutil.exe - This small VB 6 utility will create a usable backup copy of Taskmgr.exe, MSConfig.exe and Regedit.EXE in a new folder, called C:\EmergencyUtils. The new copies will be named Copy_of_Taskmgr.exe, Copy_of_MSConfig.exe and Copy_of_Regedit.com.
These programs are extremely helpful, and usually necessary in helping to rid your computer of a viral infection. Many virus programs will intercept these programs, based on their original file name, and prevent them from running. The alternate copies will not encounter this problem. Simply navigate to the C:\EmergencyUtils folder and double click the file you need to run.
You can download all of these tools from the Link Below:
Nude SSG Virus Removal Tools.
The Removal Procedure
Warning: This is a very delicate procedure so be very careful
1.) run xp_taskmgrenab.exe and enable the Task Manager.
2.) press CTRL-ALT-DEL to run the Task Manager
3.) Click the Processes Tab and Search for "Wscript.exe"
4.) Right-click the Wscript.exe process and choose "End Process".
5.) Go to My Computer->Tools->Folder Options. Then on the View Tab, choose "Show Hidden Files and Folders", disable "Hide Protected Operating System Files".
6.) Go to C:\Windows and search for Sowars.vbs. Delete it. Do the same search on other drives.
7.) Go to Start->Run then type "msconfig" (or use xp_emegencyutil.exe if corrupted) and go to the Startup Tab.
8.) Uncheck/Disable "Sowars:Wscript" and other "untitled" startup items.
9.) Restart your PC then check by running the Task Manager using Ctrl-Alt-Del. If virus still remains repeat the process.
2.) press CTRL-ALT-DEL to run the Task Manager
3.) Click the Processes Tab and Search for "Wscript.exe"
4.) Right-click the Wscript.exe process and choose "End Process".
5.) Go to My Computer->Tools->Folder Options. Then on the View Tab, choose "Show Hidden Files and Folders", disable "Hide Protected Operating System Files".
6.) Go to C:\Windows and search for Sowars.vbs. Delete it. Do the same search on other drives.
7.) Go to Start->Run then type "msconfig" (or use xp_emegencyutil.exe if corrupted) and go to the Startup Tab.
8.) Uncheck/Disable "Sowars:Wscript" and other "untitled" startup items.
9.) Restart your PC then check by running the Task Manager using Ctrl-Alt-Del. If virus still remains repeat the process.
Please Give Some Feedback
If this Guide is Very Helpful or if I miss out on some procedure
submit
-
Reply
- warzack warzack Mar 9, 2009 @ 11:09 am
- my computer infected by this virus
-
Reply
- investress investress Nov 13, 2008 @ 10:14 pm
- I have not been infected by this virus yet. But I have encountered a lot of viruses that intercepts the operation of leading antivirus programs..
Probably because I always had these computer updates and good Windows firewall protection (yes, I download torrents and other P2P software and visit "underground" sites).
Great writeup.




