Solved

remove the virus perfume.exe from my network in all pc's

Posted on 2009-04-09
5
509 Views
Last Modified: 2013-11-22
have a virus that creates a autorun.inf file and a SYSTEM directory that contains a file Perfume.exe, all are hide and when I delete them, in 1-2 seconds they are rewritten.
The question is, how could I find whitch is the process that writes this files/folders in order to kill that process and remove it from my network?
0
Comment
Question by:Arafa_said
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24106603
well if its not hidden I would check the task manager and show the pids and all processes.
0
 
LVL 11

Expert Comment

by:bmatumbura
ID: 24106689
0
 
LVL 1

Author Comment

by:Arafa_said
ID: 24106692
i have show the pids but not understand any from the numbers
0
 
LVL 11

Accepted Solution

by:
bmatumbura earned 250 total points
ID: 24106711
0
 
LVL 1

Author Closing Comment

by:Arafa_said
ID: 31568484
thank you for help
0

Featured Post

Is Your DevOps Pipeline Leaking?

Is your CI/CD pipeline a hodge-podge of randomly connected tools? You’ve likely got a tool to fix one problem & then a different tool to fix another, resulting in a cluster of tools with overlapping functionality. Learn how to optimize your pipeline with Gartner's recommendations

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some of the most commonly posted questions in the "Virus & Malware" Zones are related to the family of rogue malware with the date "2012" somewhere in the title. Examples: XP Antispyware 2012 XP Antivirus 2012 XP Security 2012   XP Home Sec…
Encryption for Business Encryption (https://en.wikipedia.org/wiki/Encryption) ensures the safety of our data when sending emails. In most cases, to read an encrypted email you must enter a secret key that will enable you to decrypt the email. T…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question