Spyware cannot remove properly

Moderators: Divesh, Gurdip Singh

Spyware cannot remove properly

Postby pratikcomputers » Thu Jan 03, 2008 6:04 pm

Winter.exe /proper.exe cannot be removed by latest mwav in normal/safe mode(created files in system32). Files are created immidiately after deleted by mwav. Selecting scan all files options in monitor setting also not work. Even i cannot create directory by same name in safe mode by deleting both files also. :roll: :lol:
pratikcomputers
 
Posts: 1
Joined: Wed Jan 02, 2008 7:08 pm
Location: pune

Postby vikas » Fri Jan 04, 2008 1:33 pm

Make sure you have downloaded latest updates. Please send us the debug from your system and Remove following folder from your
C:\PROGRA~1\XPANTI~1\

And send us the latest MWAV log file to us to resolve your problem as early as possible.
vikas
 
Posts: 124
Joined: Fri Dec 28, 2007 7:36 pm

Postby shresthasumesh » Fri Feb 22, 2008 5:23 pm

in many cases the script files like abc.vbs handles the virus action so first of all make sure that the file Winter.exe /proper.exe is not handled by such scripts for that check for the process wsscript.exe in taskmanager. if u find it then open registry and find userinit key there the default value should be X:\windows\system32\userinit.exe, where X: is the system drive letter besides this is the path of script file.

have fun
Sumesh
shresthasumesh
 
Posts: 1
Joined: Fri Feb 22, 2008 4:54 pm


Return to Virus-related Issues

Who is online

Users browsing this forum: No registered users and 5 guests

cron