Remove U.Z.A. Operating System Wallpaper
. Removal instructions
“U.Z.A. Operating System” Wallpaper is usually a sign that user’s computer is infected with a worm called U.Z.A. O/S Eliminator. The worm uses Windows auto-run feature in order to replicate itself on other computers via removable drives.
Once active, U.Z.A. O/S Eliminator changes default desktop background to black with the following white text: “U.Z.A. Operating System”. It also may add an icon next to the clock in the system tray. However, the most important thing is that U.Z.A. O/S Eliminator creates a folder named My_Personal_Data on user’s removable drive. This folder is actually an executable file. If the auto-run feature is activated, U.Z.A. O/S Eliminator then replicates itself into every computer it is connected to. We strongly recommend you to remove U.Z.A. O/S Eliminator from the system as soon possible. Removal delay can only worsen the situation.
Related files: PWallpaper.jpg, VisLoader.exe, uos.exe, boot.bmp
U.Z.A. Operating System Wallpaper properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background
U.Z.A. Operating System Wallpaper snapshot:
Automatic U.Z.A. Operating System Wallpaper removal:
(2012-01-26 14:39:36)
(2012-01-26 14:39:36)
(2012-01-26 14:39:36)
U.Z.A. Operating System Wallpaper manual removal:
Kill processes:
uos.exe VisLoader.exe
how to kill malicious processes
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies:
delete everything in Policies except the value: ???default???
do this first as it will give you access to Task Manager again
Then:
HKEY_CURRENT_USER\Control Panel\International
find the value ???sTimeFormat??? and change to read:
h:mm:ss tt
how to unregister malicious DLLs
Delete files:
boot.bmp uos.exe VisLoader.exe PWallpaper.jpg
how to remove harmful files
Information updated: 2012-01-26 12:02:21