ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
C:\WINDOWS\system32\wmvsvc.exe: Trojan.IRCBot-1593 FOUND
non_sh


Joined: 18 Feb 2008
Posts: 0
Location: Hong Kong
Reply with quote
I have been recently been infected by a msn image virus.... and I have just done a scan using clamwin and found out that the subject virus cannot be removed.... would highly appreciate it if anyone out there could advise me what is the best way to handle / remove the subject virus..... many thx!
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
The removal instructions at this site may help: https://www.anetforums.com/posts.aspx?ThreadIndex=1563 on the Web.

Plan B: Download Norman's free Cleaner at https://www.norman.com/Virus/Virus_removal_tools/24789/en-us on the Web and run it in Windows Safe Mode.

Plan C: If this doesn't work or you are unable to complete the instructions, removal help is available at (Be patient--it may take a while):

Experienced Free Malware Removal Assistance At
A-Squared (Emsisoft) (with initial self help) at https://forum.emsisoft.com/Default.aspx?g=topics&f=38
Bleeping Computer Dot Com (with initial self help) at https://www.bleepingcomputer.com/
Castle Cops (with initial self help) at https://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
Malwareteks (same personnel at Emsisoft) (with initial self help) at https://www.malwareteks.com/forum.html
Spyware Warrior has free help and a list of rogue antispyware products at https://www.spywarewarrior.com/index.php


Good luck!

Regards,
View user's profileSend private message
non_sh


Joined: 18 Feb 2008
Posts: 0
Location: Hong Kong
Reply with quote
Thank you so much GuitarBob for your prompt reply. I really appreciate your help!

Plan B worked! I ran the scan using safe mode and it reported and removed / deleted the subject virus along with some other ones. Does that mean I am safe now? I am keeping my fingers cross... Actually.. I am currently using clamwin to re-scan again to see if it is 100% removed.... will keep you posted!

Thanks again!
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
If Norman removed a file containing a virus, you are probably okay. Once in a while, however, malware comes with an identical file as the original that will re-install the virus if the original file gets deleted, so it's always good to scan again right after something is removed. An occasional Safe Mode scan with ClamWin is also good.

What you should probably do now is disable System Restore (just in case there was a restore point made while you had the virus), rescan, and then re-enable System Restore if the scan is okay.

Scan often.

Regards,
View user's profileSend private message
non_sh


Joined: 18 Feb 2008
Posts: 0
Location: Hong Kong
Reply with quote
Thank you so much for your help! I don't know how to thank you...how bout next time when you visit Hong Kong, I take you out to dinner!!!

After re-scanning with Clamwin, the subject virus has been removed now virus free Very Happy .... I will use Norman (using safe mode) and re-scan again tonite... just making sure..

Thanks again!
View user's profileSend private message
C:\WINDOWS\system32\wmvsvc.exe: Trojan.IRCBot-1593 FOUND
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic