boonyamlim
Joined: 19 Sep 2006 |
Posts: 0 |
|
|
 |
Posted: Tue Sep 19, 2006 8:53 am |
|
 |
 |
 |
 |
I got a few detected virus which cant remove from the system, appreciate if you could help
C:\WINDOWS\~tmp9537.exe is infected with Downloader
C:\WINDOWS\system32\win1ogon.exe is infected with Downloader
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\LPA9ND1J\QQ[1].EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.5\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\QQ.EXE is infected with Downloader
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\QQ.EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\V24VNDCL\QQ[1].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\K9KVKFSV\QQ[1].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\K1M3OLER\QQ[1].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\K1M3OLER\QQ[2].EXE is infected with Downloader
C:\Documents and Settings\llyen\Local Settings\Temporary Internet Files\Content.IE5\AHDARMT0\QQ[1].EXE is infected with Downloader
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Tue Sep 19, 2006 8:55 am |
|
 |
 |
 |
 |
you need to remove every one of the files listed below. Try to delete those files and if they cannot be deleted kill the corresponding process in the task manager first
the locked files might be:
C:\WINDOWS\~tmp9537.exe is infected with Downloader
C:\WINDOWS\system32\win1ogon.exe is infected with Downloader
|
|
boonyamlim
Joined: 19 Sep 2006 |
Posts: 0 |
|
|
 |
Posted: Wed Sep 20, 2006 3:09 pm |
|
 |
 |
 |
 |
Hi Alch
thank you very much on your quick response
i) I believe if i manually delete the files from the below directory, it wont harm to OS ?
ii) how do you get to know the files listed you are "locked files" ?
iii) Beside ~tmp9537, i also got the ~tmp4687, can i delete both files ?
once again thanks
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Wed Sep 20, 2006 4:23 pm |
|
 |
 |
 |
 |
My replies below:
1) yes
2) they may be loaded in memory and hence locked
3) yes anything in TEMP can be safely deleted
|
|
boonyamlim
Joined: 19 Sep 2006 |
Posts: 0 |
|
|
 |
Posted: Thu Sep 21, 2006 10:13 am |
|
 |
 |
 |
 |
Hi
thanks a lot .....
|
|