English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

It's in C:windows\system32\

I've tried deleting it, but it reappears!! :-(
Any suggestions would be great!! Thanks.

2006-11-30 02:26:48 · 7 answers · asked by James E 1 in Computers & Internet Security

Thanks jibbarjabar, Prevx has removed it, it has also found some other bad stuff!! wow this program rocks!!!! :-)

Thank you so much!!!

2006-11-30 02:55:28 · update #1

7 answers

Prevx should work:

2006-11-30 02:49:03 · answer #1 · answered by Anonymous · 1 0

Wow i'd hate to be you right now

anyway... i haven't had that virus but this is the way i got rid of one a wile back. it dosn't use any programs besides what windows comes with. it should work on lots of viruses and trojans that arn't made by experts and just made on vb6. its worth a try before you go off and buy some expensive antivirus software.

first make sure that you're on an admin login

next turn off the internet (if its a trojan it might be a server geting outside commands or sending them to other peoples computers)

hit Ctrl+Alt+Delete(or "Del" on lots of keybords)

in the Taskmanager hit the "prosses tab" it showes every single thing currently running on your computer

if you see the virus/trojan in there then its running right now

hit end prosess

now delete it were you already know it is

to find the ones you don't know about try this:

on the start menu hit "Search" (or "Find" - i don't know what version of windows you have)

on xp you'd hit "all files and folders"

then click "when was it modifide"

hit "spacify dates" and enter a date when or before you noticed the virus. a long list will come up but the the virus will (almost for sure) be in there. remember there will probibly be five or six files to delete --- if you can't find it then keep adjusting the dates

if they won't delete go the the taskmanager with Ctrl+Alt+Delete again and hit the proseses tab and look to see if the virus is running if it is it might be keeping you from deleting it and displaying fake error messages (along with other bad things)

the program might still be arround someware so always check the prosesses right after the computer turns on (this also lets you see any other trojans or viruses that come in) get to know the real prosses so you'll know when something shouldn't be there

-Hope this helps!

2006-11-30 11:23:31 · answer #2 · answered by Barrikor 2 · 0 0

I would try the AVG Free Edition anti-virus software. It is updated regularly and very effective. Some files do not delete when running under the normal OS, so you may have to boot from CD into the antivirus app and then clean the HD.

2006-11-30 10:36:03 · answer #3 · answered by Glen G 3 · 0 0

Nordsys.exe is a part of Trojan.Updatex
It creates files in different locations.delete the following files
c:\windows\ system32\ nordsys.exe
c:\windows\ system32\ W.EXE.EXE
c:\windows\ system32\ LCPVPWAA.EXE

search your computer for files named
A00000000
SE.EXE.EXE
delete if found.

disable system restore in xp.
Click on start > all programs > Accessories > System Tools > System Restore
Click on System Restore settings.
Check the box to Turn off system restore on all drives.
press apply. press ok.

download, install and run free registry cleaner and scrap cleaner softwares.
http://bestofrest.blogspot.com/2006/11/regscrubxp-registry-cleaner.html

http://bestofrest.blogspot.com/2006/11/ccleaner.html

(Use the registry cleaner to trace the entries of the files nordsys.exe, W.EXE.EXE, LCPVPWAA.EXE, A00000000,
SE.EXE.EXE in the registry, and delete them)

2006-11-30 11:04:55 · answer #4 · answered by Anonymous · 0 0

I can give a few links that offer free virus and spyware removers...! Do not down load a program until you are satisfied that it is safe to use. Norton, AVG , Avast are free antivirus software. Ad-aware, Ewido are free spyware removers. You can download free softwares at
http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

2006-12-01 02:58:36 · answer #5 · answered by RICH 3 · 0 1

Scan your computer with a antivirus program in safe mode.

2006-11-30 10:42:42 · answer #6 · answered by Anonymous · 0 0

have you tried running the free scan at http://housecall.trendmicro.com ?

2006-11-30 10:35:58 · answer #7 · answered by hallmike1 7 · 0 0

fedest.com, questions and answers