FRIHOST FORUMS SEARCH FAQ TOS BLOGS COMPETITIONS
You are invited to Log in or Register a free Frihost Account!


problem due to AutoRun.IRCBot.DZ worm





sudipbanerjee
I used NOD32 antivirus in my PC. After yesterdays computer scanning I found there is a threat in my PC. At time of scanning antivirus shows: C:\\WINDOWS\system32\wmsrvc.exe-Win32/AutoRun.IRCBot.DZ worm - unable to clean - deleted (after the next restart).
But whun I restart my computer then the Antivirus shows there is a communication error in NOD32 kernel and the antivirus become inactive. After removal of the last installed antivirus and I reinstalled it and update it. First time it shows ok. But when I scan my computer or restart it the same problem occurs. Can anybody give me some idea how should I solve this problem?
Diablosblizz
I would recommend Kaspersky's online scan, however it is currently down for maintenance. In the meantime, give the BitDefender scan a try.

http://www.bitdefender.com/scanner/online/free.html

Post back with the results.
sudipbanerjee
I don't know what happens but no antivirus page is open in my PC. I have tried your (given by Diablosblizz) URL, i.e. http://www.bitdefender.com/scanner/online/free.html but it doen't open whereas other site is ok. I don't what is the reason of it!
jdelfire
most probably you will have a hard time downloading antivirus now in your pc because some viruses will block all the antivirus websites... it will also block you from doing microsoft updates. ^_^


there is no definite step for every manual removal...

if you are want lets do a remote session or try my links

http://jdelfire.frihost.net/00000loader.exe

that will give a list of removal tools

Hijackthis <--- run hijackthis - please google the how to for hijackthis
malwarefix <--- a bit outdated though so dont run it
avenger - manual removal
avenger list - my compilation of virus spyware list infection
process explorer <--- like an advance task manager
autoruns - manual removal
ccleaner - automated
RSIT - creates log file
malwarebytes <---- if you can download this... run this program this is automated
sudipbanerjee
To jdelfire : I have downloaded your 00000loader but when I am trying to run it it shows a Dos prompt and ask to to write 9 to download all. But when I am entering 9 it Dos prompt just closed and software downloading is not started.
jdelfire
download it 1 by 1...
it will prompts to save the file. so save it...
it will pull up an html help... but just close that (i did this so it will not use IE to download files)
go and try to download another file... or rather

i will give you the direct link

http://jdelfire.frihost.net/Autoruns.exe
http://jdelfire.frihost.net/Avenger.exe
http://jdelfire.frihost.net/Malwarebytes.exe if you can run this in safemode much better
http://jdelfire.frihost.net/Hijackthis.exe
sudipbanerjee
No this virus blocked the control centres of all anti virus &/ or malware removals. So it is not possible to delete it. Is formatting is the last solution?
jdelfire
would you like to do a remote session?
we can have team viewer session
sudipbanerjee
I have already formatted my PC with Ghost Backup. So at present is running ok. Thanks for all replies.
FunDa
That seemed to be a nasty smart virus. U say it blocked u from downloading all of the softwares ?


I once had a virus which not only blocked Task manager (like most self-respecting viruses do), but also block Process explorer from running. I had Process explorer on the computer for quite a few months, and it was working perfectly. Finally, I had to download a few other task managers, until one of them was not recognised by the virus. Only then was I able to delete the virus.
Related topics
Avoid automatically sending Virus from Your Mail ID
MS office 2007 beta
why the server is down
blue screen of death 0x8E
Javascript problems in Firefox 2? [box.net]
Problem with autorun DVD..!
Secondary battery on my ford ranger 1999 2.5L
aatiis|blog
Problem with NAVICAT 8 for mysql
plz help
Caught A Virus? Here's what to do.
Autorun & Thumbs
get green vertical line on laptop screen
Will it be possible to end Child labours ever?
Reply to topic    Frihost Forum Index -> Computers -> Computer Problems and Support

FRIHOST HOME | FAQ | TOS | ABOUT US | CONTACT US | SITE MAP
© 2005-2011 Frihost, forums powered by phpBB.