English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

our entire network is affected by "ie.exe" virus , norton,mcafee & caspersky are failed to detect this virus. plz help.

2007-09-19 03:06:57 · 8 answers · asked by mukund patel 1 in Computers & Internet Security

8 answers

Hope this helps:

Windows NT/2000/XP/2003

In Windows NT/2000/XP/2003 you will also need to edit the following registry entries. The removal of these entries is optional in Windows 95/98/Me. Please read the warning about editing the registry.

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\

and remove any reference to any file you deleted.

Each user has a registry area named HKEY_USERS\[code number indicating user]\. For each user locate the entry:

HKU\[code number]\Software\Microsoft\Windows\
CurrentVersion\Run\

and remove any reference to any file you deleted.

Close the registry editor.

Advanced
Summary Description Recovery Advanced
This section is for technical experts who want to know more.
W32/Sdbot-VS is an IRC backdoor Trojan and network worm.

W32/Sdbot-VS attempts to spread to remote network shares protected by weak passwords and computers vulnerable to common exploits.

W32/Sdbot-VS opens up a backdoor, allowing unauthorised remote access to the infected computer via the IRC network, while running in the background as a service process.

W32/Sdbot-VS can receive commands from a remote attacker allowing them to control the infected computer.

W32/Sdbot-VS copies itself to the Windows system folder as "IE.EXE" and creates the following registry entries in order to run automatically on computer login:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Internet Explorer =
IE.EXE

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Internet Explorer =
IE.EXE

wdw

2007-09-19 03:14:17 · answer #1 · answered by Who Dares Wins 7 · 0 0

2

2016-08-22 12:37:57 · answer #2 · answered by ? 3 · 0 0

ie.exe is the internet explorer programme. Are you sure you have a virus?. What exactly is the problem. List symptoms and any clues that appear on the screen.

2007-09-19 03:19:34 · answer #3 · answered by terryrow 2 · 0 0

right here is the main suitable factor to do. Have him backup any data he desires, and re-format the complicated force. deploy a sparkling reproduction of abode windows XP or Vista whichever is on it now. Then, once you're accomplished bypass and obtain AVG unfastened version. Google it. deploy, and you're set.

2016-10-19 02:25:56 · answer #4 · answered by yau 4 · 0 0

Try AVG Anti Virus...
or Spybot search and destroy

2007-09-19 03:18:11 · answer #5 · answered by kix 2 · 0 0

Cuz internet explorer really is a virus....

2007-09-19 03:13:12 · answer #6 · answered by Anonymous · 0 0

Sophos website tells you how to remove it
http://www.sophos.com/security/analyses/w32sdbotvs.html

2007-09-19 03:13:45 · answer #7 · answered by darylzero46 4 · 0 0

Look here:

http://searchg.symantec.com/search?q=ie.exe&charset=utf-8&proxystylesheet=symc_en_US&client=symc_en_US&hitsceil=100&site=symc_en_US&output=xml_no_dtd&context=gbh&proxy=symc_en_US&searchContext=norton_search_context_text&lg=en&qp=language%3Aen

2007-09-19 03:14:43 · answer #8 · answered by MajorTom © 6 · 0 0

fedest.com, questions and answers