[Tutorial] How to remove FUvirus

[symphalion]

FUvirus

Is a new virus that now conquering all computers by storm, now it is famous but said that cannot be detect by some anti-virus and spyware applications.

This file can perform following behavior

•File is created as process on the disk.

•This process can create, delete or modify files on the disk.

•Folders change its icon.

•Document folder always open after opening the desktop

•Can't open WINDOWS in hard disk

How to Remove

1. Close any application, browser and your anti-virus.

2. Download ComboFix, we need it to remove the FUvirus.

3. Open notepad and copy/paste the text in the quotebox below into it:
​

KillAll::

File::
c:\windows\IFinst27.exe
c:\windows\Tasks\AB30F2F3919B68EF.job
c:\docume~1\loimic~1\applic~1\4hole\Tick stupid cast.exe
c:\docume~1\LOIMIC~1\APPLIC~1\4hole\bitswindowsite.exe
c:\windows\system32\FUvirus.exe

Folder::
c:\docume~1\loimic~1\applic~1\4hole\

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0b1e74c2-0019-11dc-9a0f-806d6172696f}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1d43c855-47c5-11dd-be43-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{24d4ecec-ab67-11dc-bdba-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c525715-13f5-11dc-99fb-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4ee655c6-5194-11dc-9a6a-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5020d6b3-51b0-11dd-be49-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{61900cbc-a7bb-11dd-8e21-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6e484edc-9eb0-11dc-9adf-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6eae7034-9ddd-11dc-9ade-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6eae7049-9ddd-11dc-9ade-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{71156742-34a4-11dc-9a30-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8271785a-8183-11dd-be6a-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{924ff07f-ee39-11dc-bdf7-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9b307eb6-7058-11dd-be5d-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9b307ebe-7058-11dd-be5d-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b24f4dfd-0057-11dc-9a11-d5deff17bbf1}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bb7bd93a-902d-11dc-9ad6-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da9047ec-0d9d-11dc-99ec-d4aa521976e0}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eb632e57-5db4-11dd-be4e-00e04cc0c7ec}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eda36a24-9292-11dc-9ad9-00e04cc0c7ec}]

4. Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at "C:\ComboFix.txt"

Note:

Do not mouseclick combofix's window whilst it's running. That may cause it to stall
​

 

[adin234]

tnx, sawakas, naalis ko na, pesteng virus yan

 

[marktreseh]

salamat dito..parang ganito yung problem n pc ko eh..thanks sana makatulong na ito..

 

[symphalion]

Wala yun naapektuhan din kasi PC ku nyan kaya share ku lang din..

Glad that I helped

 

[razzspade]

kuya hindi ko ma download ang combo fix.siguro gina block ng virus.pwede po ako hingi favor.pakisend na lang po sa email ko:
[email protected]

kailangan ko talaga maayos ang laptop bago pa kunin ni tita..rami na FU virus eh..kagabi ko lang nalaman na FU virus pala name nito..



OR ANYONE na pde magsend sakin ng software pls..maawa po kau..


TNX in advance for your help!

 

[razzspade]

elow..kuya solve na..kaso may sinabi xa.."whitedir" not found..parang ganun..di ko exactly nakuha ang file name basta may whitedir xa..pero ok naman,nawala na talaga xa..pinoproblema ko sa pc ng bestfrnd ko..ilang beses na nagrestart still walng nangyayari..

tnx for your help kuya

 

[arcmike1164]

kuya pa send naman po sa email ko yung combofix.exe.... kasi po hindi ko po madownload. dito you nalang send sa email q [email protected].

salamat po.

 

[Jeremy47]

Thanks sir for the instructions and the upload.
the FU virus was removed yet it left me with a problem. during the cleaning process i saw it deleted the contaminated the root folder - exe's much to my fear, after the cleaning was done i was it was gone. but now the root folders of my drives were gone too. i rechecked the file system and my hard disk still had the same memory allocated.

i rechecked using a backup utility program, and it was there. are there any fixes or solution to get my folders to be seen again?

ayoko na mag reformat all help will be gladly appreciated

 

[pucca_08]

hi po.. same po kme ng problen ni Jeremy47..need help po
thanks in advance

 

[bh0ngg]

Thanks for this topic. It's really a great help!

Thanks sir for the instructions and the upload. the FU virus was removed yet it left me with a problem. during the cleaning process i saw it deleted the contaminated the root folder - exe's much to my fear, after the cleaning was done i was it was gone. but now the root folders of my drives were gone too. i rechecked the file system and my hard disk still had the same memory allocated. i rechecked using a backup utility program, and it was there. are there any fixes or solution to get my folders to be seen again? ayoko na mag reformat all help will be gladly appreciated

• your original files are still there, yung mga .exe na nakikita mo dummy lang at nigaya nya lang yung filenames ng original files mo..
• yung mga files mo naka-hidden lang, so in able to retrieve them,
☺ go to Folder Options (Click Tools on your menu bar);
☺ on View Tab, enable 'Show hidden files and folders'
☺ then select mo na yung mga files mo - right click - properties - then uncheck "Hidden" sa Attributes.
☺ click Apply / Ok
• same action kung folder ang nakahidden.
• you have now retrieved your files.
• i recommend to backup your files, para may backup ka..

 

[ronaldsanjos]

Wow thanks d2 haha

 

[alphie03]

sir paano ko e2 mapapatakbo in windows 7 mode?

 

[bentedos2007]

Kamusta tnx don sa Pang remove ng FU virus Share ko to kung nag hide ung mga files nyo try nyo gamitin ti sa dos command
attrib d:\*.* /d /s -h -r -s

ung first letter nya ay ung local drives na gusto nyo i unhide....

try nyo po bka mkatulong.....

 

[bentedos2007]

try mo hanpin ung run
den type mo ung cmd

 

[craptjay]

tol... salamat sayu.. huh.,..
sa wakas mabubuhay kona rin.. akin..

onlinegame.. mwah.. ^^

 

[angelanne08]

uhmm hnd na kse ako nwala dun sa rebooting windows na part. anu dapt gawin?

 

[lovehatetragedy]

Kuya maraming salamat sau,yan din problema ng pc q,thanks a lot

 

[smooth_criminal24]

nakuha ko ung virus na yan sa AMA lahat ng nakita kong folder na may exe binuksan ko bumagal tapos nakalagay FU VIRUS sa taskmanager hindi na sya naalis sa USB baka alam nyu kung paanu tanggalin yun? help naman po please nag papasa pasahan kasi kami ng kaibigan ko kabwiset yang virus na yan kahit format na USB wala pa din.

 

[bothunter]

i tried to download yung pang tagal ng virus kaso naka deepfreeze pala ko gusto ko sana i confire muna kung ano po ba mangyayari sa pc ko kasi ganito po ang situation...

Deep freeze pc ko yung brother ko inalis sa freeze at nag load ng mga picture galing sa friend nya after that yung mga application ko ng online games ayaw na mabukas puro dun sa document n lang nagdidirect so nag hanap ako ng solution nakita ko nga ito sa google kaya try ko ang problema wala daw akong backup ng windows system restore ata so mag dodownload muna yung program ng backup something hindi ako sure kung ano yung download nya, ang kinakatakot ko baka mabura lahat ng laman ng pc ko gusto ko lang po sana i confire or to be sure kung kahit po ba nag download sya ng system backup same pa din po kaya itsura at laman ng pc ko or baka bumalik sa parang bagong format sana po ma replyan nyo po agad ang aking problema maraming salamat po at more power

 

[Menet]

Thanks tol...