Solved

Virus Issue (Win.exe - error)

Posted on 2009-07-05
2
452 Views
Last Modified: 2013-12-09
Hi,

We are facing a problem with our client machine, till now 5 machine have been affected with this issue, for which i have attached the screen shot.

We are using symantec End point protection which are up to date on the infected machine.

This error is getting pop up ever  5 mts, even we are not able to access registry / task manager and unable to enable the hidden files & folder.

This win.exe file is there in c:\windows\win.exe which is not the system file, when we are trying to delete it its getting deleted but again coming back after some time, we tried to contact with symatec still the case is in progress after 12 days ,

If any quick solution will be appreciated.

Regards,

Syed tanveer hussain.


error.doc
0
Comment
Question by:tanveer_hussain
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 13

Accepted Solution

by:
JeremySBrown earned 500 total points
ID: 24782669
Hi tanveer_hussain,

Try running the following:

   1. Combofix
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

   2. Dr. Web Anti-Virus
http://www.freedrweb.com/

However...there's also SUPERAntiSpyware and Malwarebytes' Anti-Malware...but these are meant for spyware and malware removal...but scan these as well...

http://www.superantispyware.com/
http://www.malwarebytes.org/mbam.php

Also before running Combofix...temporarily disable your firewall...and any other anti-virus to prevent any conflicts...
0
 

Author Comment

by:tanveer_hussain
ID: 24783167
Mr. JeremySBrown:,


Thanks a lot, i tried running combofix after that regedit /task manager / hidden folders started working, even now i am not getting that error message.

Thanks for your quick reply and support.


regards,

Tanveer.
 
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some site administrators might be considering how to filter incoming traffic to a site by identifying the domains or networks of the traffic source, in the same way that a spam filter does on an email server, such as blocking all emails sent from th…
PREFACE The purpose of this guide is to explain what the SEPC Status Utility is and how it works. I have written the utility using AutoIt and have included the source code for your review. You are welcome to modify the code to your liking, but I wi…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question