ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Stubborn virus CANT REMOVE !!
boonyamlim


Joined: 19 Sep 2006
Posts: 4
Reply with quote
I got a few detected virus which cant remove from the system, appreciate if you could help

C:\WINDOWS\~tmp9537.exe is infected with Downloader
C:\WINDOWS\system32\win1ogon.exe is infected with Downloader
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\LPA9ND1J\QQ[1].EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.5\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\QQ.EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\V24VNDCL\QQ[1].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\K9KVKFSV\QQ[1].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\K1M3OLER\QQ[1].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\K1M3OLER\QQ[2].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\AHDARMT0\QQ[1].EXE is infected with Downloader
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
you need to remove every one of the files listed below. Try to delete those files and if they cannot be deleted kill the corresponding process in the task manager first
the locked files might be:
C:\WINDOWS\~tmp9537.exe is infected with Downloader
C:\WINDOWS\system32\win1ogon.exe is infected with Downloader
View user's profileSend private message
boonyamlim


Joined: 19 Sep 2006
Posts: 4
Reply with quote
Hi Alch

thank you very much on your quick response

i) I believe if i manually delete the files from the below directory, it wont harm to OS ?
ii) how do you get to know the files listed you are "locked files" ?
iii) Beside ~tmp9537, i also got the ~tmp4687, can i delete both files ?

once again thanks
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
My replies below:

1) yes
2) they may be loaded in memory and hence locked
3) yes anything in TEMP can be safely deleted
View user's profileSend private message
boonyamlim


Joined: 19 Sep 2006
Posts: 4
Reply with quote
Hi
thanks a lot .....
View user's profileSend private message
Stubborn virus CANT REMOVE !!
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic