Stay out virus!! (UZA)

U.Z.A O/S?!

what is UZA Operating system?

actually its a, some kind a spy ware , u can call it a virus.

” I used a pen drive last. next time when I opened my computer, its boot screen was changed as picture shown.”

Many of my friends are victim of this UZA

what it do is, Disabling Display Properties Task bar and it also changes the boot screen logo.

Solution:

what u need to do is delete some Registry Keys

here we go

hklm\software\Microsoft\windowsNT\currentversion\winlogon\

delete “IgnoreShiftOveride”

hkcu\software\microsoft\windows\currentversion\policies\system\

delete all hives under system, but default.

So now you can open Taskmanager use shortcut Ctrl Alt and Del

select Process Tab

From there you can find UOS.EXE .end process that one

Go to C:\Windows\System

Delete UOS.EXE

Ok Now is to change boot logo.

okay go to System properties from control panel or use the easy way (press windows button and Pause Break from the keyboard.)

okay select the Advance tab

under the startup and Recovery go to settings

Now find a Edit button

Now it will take you to the boot.ini

here is the Default file.

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=”Microsoft Windows XP Professional” /noexecute=optin /fastdetect

so delete any thing comes after fastdetect

Okay now the last thing , to change the UZA O/S near the system clock.. right?

change this keys from Registry

HKEY_CURRENT_USER\Control Panel\International\

“sTimeFormat”=”h:mm:ss tt”

and delete these dll’s from the directry

C:\Windows\system32\

DPP(1).dll,DPP(2).dll,DPP(3).dll,DPP(4).dll,DPP(5).dll,DPP(6).dll,DPP(7).dll,DPP(8).dll,DPP(9).dll

DPP(10).dll

C:\Windows\system32\VisLoader.exe

C:\Windows\boot.bmp

C:\Windows\system32\PWallpaper.jpg

so now its time to say bye to uza operating system right!