Link to home
Start Free TrialLog in
Avatar of swpui
swpui

asked on

Can delete this?

These were found under Windows folder, can I delete it, will it affect anything??
win-file.jpg
Avatar of Randy Downs
Randy Downs
Flag of United States of America image

That may be a virus

http://www.symantec.com/connect/blogs/backdoor-trojan-removal

The following activities were performed:-
1.I observed that backdoor.trojan was infecting the files win.exe and dod.exe and Symantec was protecting them in this time of protection Symantec gave a popup of autoprotect . Also observed that this virus was causing the volume drives not to be opened by double clicking instead by rightclick >explore.
2.Now I tried to folder options and tried to unhide but folder options was not working so now by command prompt run >c:autorun.inf to check for exe file so it came as e:winfile.jpg
3.Now in run >cmd>I typed attrib -r –s –h autorun.inf to unhide it and attrib -r –s –h winfile.jpg .The file would appear and disappear so to solve this follow steps below.
a)DOWNLOAD LATEST RAPID RELEASE and deploy it on the client pc or if rapid release does not deploy download .xdb file and rename it from .zip to .xdb and paste it at c:documnetsandsettings/all users/ .Then turn off system restore and scan. After scanning then restart in normal mode , then check in
run>cmd>c:attrib –r – s –h winfile.jpg
c:attrib –r – s –h autorun.inf
c:del autorun.inf
Now try accessing the volume drives it will give error c:script not found winfile.jpg
Then in other volumes check the same as above mentioned steps .To ensure winfile.jpg and autorun.inf do not exist .Also ensure winscript.exe is not running in taskbar Then again restart the PC
ASKER CERTIFIED SOLUTION
Avatar of John
John
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I started an XP Pro virtual machine and I have the same Uninstall files as you. No viruses at all on this machine. So do not delete these files.

User generated image
... Thinkpads_User
Avatar of swpui
swpui

ASKER

thanks
Thank you. I was pleased to help you with this..... Thinkpads_User