My Internet Explorer Title was changed to “Bertakwalah kepada Alloh dimanapun kau berada Removal Needed.” Sometimes, web page is redirected to an unwanted sites which is quite annoying. It will also display a bunch of advertisement on my desktop and will only stop if I disconnect Internet. Can someone help me with the removal of this virus?
1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
– Update Malwarebytes’ Anti-Malware
– Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart your computer.
Note: Some malware may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.
Actually this is an automated script which is applied in your system. For removal of this please follow the following steps –
1. Open My Computer > Tools > Folder Options > View
2. In Advanced Settings select “Show hidden files and folders” and remove the checkmark from “Hide protected operating system file (Recommended)”, Press OK for the warning message.
3. Open all system drives one by one (example C:, D; etc) and delete autorun.inf and any file with ‘vbs’ extension (file name shud be sgt.sys.vbs).
4. Delete the same vbs file from C:\Windows folder also.
5. In case you are unable to delete the vbs file then kill the wscript.exe process from task manager
6. Open Reg editor and navigate to Hkey_users > S-1-5-21-1244467668-1331586020-26564730-… > Software > Microsoft > Internet Explorer > Main
7. On the right pane dbl clk the Window Title and type “Microsoft Internet Explorer”
8. Exit registry editor
This will resolve the issue :)
thanks Arun, I hope it works
thanks arun for the solution. It works, but now if I try to open my drive C: it was looking for the file “sgt.sys.vbs” and I can’t open my drive except when I used windows explorer. I open the registry looked for the entry of this vbs name and found several entry on the windows shell rundll on the last line with wscript sgt.sys.vbs. I delete all of them (wscript sgt.sys.vbs) but still it wont open the drives by just double-clicking it. any advise?
Thanks
i am also have the same problem
1. Open My Computer > Tools > Folder Options > View
2. In Advanced Settings select “Show hidden files and folders” and remove the checkmark from “Hide protected operating system file (Recommended)”, Press OK for the warning message.
3. Open all system drives one by one (example C:, D; etc) and delete autorun.inf
After deleting this file…everything will run smoothly.
just FYI you guys that McAfee has also detected this as a virus and if you scan your system wih updated McAfee..you need not to do anything…:)
Also please delete your restore points and do not restore your system to the back date as it will reappear otherwise. please see this link – http://vil.nai.com/vil/content/v_142197.htm
Hkey_users > S-1-5-21-1244467668-1331586020-26564730-… > Software > Microsoft > Internet Explorer > Main
The above function is not understand.
Pls tell me how to work it.
Dear Renu
Pls find below the method to rename the IE window Title
Start–>Run—>Type Regedit
Go to: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Change the Window Title to “Microsoft Internet Explorer”
Exit Regedit and restart the System
Regards
Vivek Thobula
Hey vivek help me out
Start–>Run—>Type Regedit
Go to: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Completed the step mentioned above but tell me how to Change the Window Title to “Microsoft Internet Explorer”
Sgt.sys.vbs reappears automatically.
How to solve??