Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Please Help!does Anyone Knows How To Remove Pirate Par Willpolo Ingenieur En Hacking?


  • Please log in to reply
3 replies to this topic

#1 OlGICA

OlGICA

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 06 March 2008 - 04:25 AM

I am infected by pirate par willpolo ingenieur en hacking..and i don't have idea how to remove it.

BC AdBot (Login to Remove)

 


m

#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,723 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:05:21 PM

Posted 07 March 2008 - 04:28 PM

Hello OlGICA and welcome to BC :flowers:

In order to assist you, we need more information.

What is your operating system: Windows XP, Vista, etc.?

What security programs do you have installed? Please name them.

What alerted you to Pirate Par Willpolo Ingenieur En Hacking?

Are you experiencing any problems with your computer? Please describe.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 OlGICA

OlGICA
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 11 March 2008 - 05:50 AM

my sistem is windows xp and the message pirate par willpolo ingeneur en hacking appeared upper on the wiindow for internet explorer. And I thought that this maybe is virus or something.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:21 PM

Posted 11 March 2008 - 12:08 PM

Please insert your flash drive before we begin!

Download Flash_Disinfector.exe by sUBs and save it to your desktop.
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
  • The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
  • Wait until it has finished scanning and then exit the program.
  • Reboot your computer when done.
Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that is plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.

Reboot your computer in "Safe Mode" or "Safe Mode With Command Prompt" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode With Command Prompt".
  • Go to Start > Run and type: cmd
  • press Ok.
  • At the command prompt, type in your primay drive location, usually C:
  • You may need to change the directory. If so type: cd \
  • Hit Enter.
  • Type: attrib WillPolo.* -s -h -r -a
  • Hit Enter.
  • Type: dir /s WillPolo.vbs
  • Hit Enter.
  • If the file is present, type: del WillPolo.vbs
  • Hit Enter.
  • Repeat the above commands for each drive on your computer including your flash/usb drive.
  • Then repeat the above commands to search for and delete ibtrun.bat on each drive.
  • Exit the command prompt and reboot normally.
Then enable the Registry Editor if disabled, check for and remove any related registry entries as described by Trend Micro: VBS_SOLOW.AF. (Click on the Solution tab.)

Trend Micro's solution involves making changes in the registry. Always back up your registry before making any changes. Improper changes to the registry could adversely affect your computer and render it inoperable. To do this, go to Start Run and type: regedit
  • Click OK.
  • On the left side, click to highlight My Computer at the top.
  • Go up to File Export
    • Make sure in that window there is a tick next to "All" under Export Branch.
      Leave the "Save As Type" as "Registration Files".
      Under "Filename" put RegBackup.
  • Choose to save it to C:\
  • Click save and then go to File Exit.
Or you can download and use ERUNT which is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users