[ Home  |  FAQ-Related Q&As  |  General Q&As  |  Answered Questions ]


    Search the Q&A Archives


C:\WINDOWS\SYST32\PICS.EXE:\fixme.bat infected with the...

<< Back to: VIRUS-L/comp.virus Frequently Asked Questions (FAQ) v2.00

Question by dimples_tpo
Submitted on 3/19/2004
Related FAQ: VIRUS-L/comp.virus Frequently Asked Questions (FAQ) v2.00
Rating: Rate this question: Vote
C:\WINDOWS\SYST32\PICS.EXE:\fixme.bat
infected with the virus Worm/Ircobus
C:\WINDOWS\SYST32PICS.EXE:\rundll31.exe
infected with the virus BackDoor.Iroffer.E
my current anti-virus can not remove, heal or fix this problem. I'm not really computer literate
please help.


Answer by Michael Barr
Submitted on 6/29/2004
Rating: Not yet rated Rate this answer: Vote
Hullo

Booted into safe mode and searched in the registry for rundll31 and deleted all entries that I could. Some wouldn't delete.
Rebooted and the Windows 2000 pc ran a good deal faster but I could hear the hard drive still working hard. Task manager showed the cpu 96% free.
Removed Logitech mouse software in the control panel and rebooted.
Disabled the Firedaemon service and rebooted.
The pc seemed ok for some minutes but then the hard drive started up again. Disabled the telephony service, rebooted then reenabled the telephony service.
The pc now seems to be running OK
For more info see FAQs in www.solvedit.com.au

 

Your answer will be published for anyone to see and rate.  Your answer will not be displayed immediately.  If you'd like to get expert points and benefit from positive ratings, please create a new account or login into an existing account below.


Your name or nickname:
If you'd like to create a new account or access your existing account, put in your password here:
Your answer:

FAQS.ORG reserves the right to edit your answer as to improve its clarity.  By submitting your answer you authorize FAQS.ORG to publish your answer on the WWW without any restrictions. You agree to hold harmless and indemnify FAQS.ORG against any claims, costs, or damages resulting from publishing your answer.

 

FAQS.ORG makes no guarantees as to the accuracy of the posts. Each post is the personal opinion of the poster. These posts are not intended to substitute for medical, tax, legal, investment, accounting, or other professional advice. FAQS.ORG does not endorse any opinion or any product or service mentioned mentioned in these posts.

 

<< Back to: VIRUS-L/comp.virus Frequently Asked Questions (FAQ) v2.00


[ Home  |  FAQ-Related Q&As  |  General Q&As  |  Answered Questions ]

© 2008 FAQS.ORG. All rights reserved.