Computing.Net > Forums > Security and Virus > how to get ride of rose.exe

how to get ride of rose.exe

Reply to Message Icon

Original Message
Name: muscleandblood
Date: November 1, 2006 at 04:28:21 Pacific
Subject: how to get ride of rose.exe
OS: WinXp
CPU/Ram: 3200 MHz
Model/Manufacturer: dell
Comment:

Hi to every one i hust have explantion about that i think that u are got virus called Rose.exe its new virus written in VB recently my computer get infected with it but im succfully removede that dam virus manually with out help of antiviruses program this virus copy 2 files in every partion u have and in any remaovable drive so watch that becauze if u insert any flash memory in ur computer u will get infected

----------
how to remove the virus
--------------------------
first u must know that a virus is hidden
so u must show all hidden files and folders and also system files from folder option and u will see the file rose.exe with its icon that realted to defalut VB icons if u try to delete it it will show u message that this application is used by another program and u cannot delete it so u must now that annoyed program actually if u press alt+ctr+del
u will see that its present in the list so u must kill this process (end task)or if u windeows action Back 3 insltaaled u might used suspend the process by right click this is the first step
the second is when ur computer starts theis virus is start with it because its put on startuplist u must remove it from there how:
by typing in run Msconfig and selecting startup programes and remove the check then its prefer to restart ur computer
then we go to real pactions u must delet all rose.exe files i think that they are present in these dictioneris c:\rose d:\rose and like these and there file presnt in system32 delet all files or by serching it in all drives and deleting it after deleting files u delete the association files that open the rose.exe when u open any drive u have (and that the reasn that ur drive not open with double click so u choose right click and open )
this file is called autorun.info present direclty in all drives and if u want to sure that the file is must delet if u want to make sure that the file is must delete u must make sure that u are going to delet the right file cause many system files look like these u must open it with notepad and u will see these 2 lines if this the right file:3
-([autorun]
shellexcute=rose)-
if these 2 kines present delete it dont worry nothing will caffect ur computer .
-------------
final step :
u must delete the virus and its values from the registery .
hows that
type in run regedit
then go to edeit and choosing from it find and typed in the textbox the name of the file : rose.exe
and when u find rose.exe value choose right click and delete any value then press f3 to find next because thier is many values to these dam virus and after u finshed these tedious job restart ur computer and everything will be ok
finally i posted that becaus i want many people to raed and get the usefullness
4 more infroamtion plz send to e-mail on:
lockedarea@yahoo.com
and finally i must say that main mode of transmsiion of this virus thru Yahoo or MSN messnger thru offline messages from some ur friends on messanger list and within these offline messages link to website that is emptu and that will trap so the virus will automatically download to ur computer.
lockedarea@yahoo.com
Ali Adel Al-fayyad from jordan


Nothing is impossible


Report Offensive Message For Removal


Response Number 1
Name: Bob (by BigBob)
Date: November 1, 2006 at 05:28:59 Pacific
Reply: (edit)

See if this helps
WORM_SETROX.A/rose.exe

" Please Post back to let us know if we helped "


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: how to get ride of rose.exe

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge