Haha Virus ?

Question

i used avg to scan and it deleted the ‘haha.js’ file. i dont think that my laptop is affected with the msn virus but after the file is erased, i cannot click into my c and d drives anymore it showed "cannot read script "D:\Haha.js ,This is inclusive of my thumbdrive too. i need help. i cannot format my laptop because i have important assignments in both the 3 drives. can anyone give me a solution without having to format it entirely? please and thanks.

i tried the way Daniel C taught ,and deleted all haha.js which are in Registry
after that i got this problem when i click into hard drive "This file does not have a program associated with it for performing this action. Create an association in the folder options control panel ,and i restarted my PC again ,i got the "cannot read script D:\haha.js again!!

Answer 1

email the assignments to yourself.

you need to back up your important information buddy, just in case something goes wrong like "cannot read your work "*.* Haha.js

burn it copy it email it whatever it just back IT up.

format to be safe.

Answer 2

I can't tell exactly what is happening. If you can't access either the C or D or thumbdrive, can you still boot?

First, try to Safe Boot. Press the F8 key during the boot cycle.

Most laptops have a complete operating system recovery process built in.

Since you can somehow access the web, google the recovery process for your specific laptop. Here's an example using Toshiba.

http://www.google.com/search?hl=en&q=laptop+restore+operating+system+toshiba

After you can Safe Boot or Normal, Start > Run > MsConfig. You can easily uncheck the programs and SERVICES which load when you boot.

Apparently some program is hanging your system while it looks for the haha.js file.

YOU CAN CREATE A DUMMY FILE from simple text. Give it the exact file name and location of the deleted file.

That's the gist of my Rootkit Blocker process. I'll attach a link.

Good luck,
- CarlD

http://answers.yahoo.com/question/index?qid=20070904044220AA2aT9l

Answer 3

maybe you need to delete autorun.inf inside each of the drives.

open my computer, and in the menu bar, click tools>folder options. select the view tab, and click on show hidden files and uncheck hide protected system files. click ok.

open each drive (including thumb drives) with a right-click and select explore. this is to prevent the virus from running and also to enable access to your drives. shift+delete autorun.inf to delete it permanently.

now test it whether to see it's working or not. i don't guarantee it will work 100%, but based on my experiences, it should work anyway.

you also may realized that your internet explorer have changed a bit in the title bar. you can fix this at http://computing.net/security/wwwboard/forum/21632.html

also i recommend viewing this site for further reference on the virus removal http://mydigitalnetwork.blogspot.com/2007/09/how-to-remove-hahajs.html

Answer 4

AVG should have done this extra step:

Start:Run:regedit
Do Edit:Find
and type in "haha.js"

Each time it finds a line with that, delete that line (in the right window, right-click the line and select Delete and answer yes). Hit F3 and repeat until it says there are no more matches.

Answer 5

I would suggest you run your antivirus software in Safe Mode. Hopefully you will catch self-executable viruses. If you do catch it and delete it, I would immediately run a full system scan - again in Safe Mode.

When you exit Safe Mode, your desktop icons will probably be out of order. Just drag them back into place.

Would also suggest, after the scan, you run Disk Cleanup, Scandisk, and defrag. Life will be easier.

Answer 6

I would boot up into safe mode and run a system restore first.

Just to see if you can then get back into the computer. Did avg delete or quarantine.

to get into system restore

Click start /run type the following in %systemroot%\system32\restore\rstrui.exe



then go here and follow the steps and post a hijack log
http://groups.msn.com/WindowsXPCentral/infectionremoval.msnw

Answer 7

You can store up to 5 gb of data online at http://www.Xdrive.com/ free. The UBCD (The Ultimate Boot CD) has several tools that may assist you in data transfer and malware removal.

http://www.ultimatebootcd.com/