Spyware cannot remove properly
Posted:
Thu Jan 03, 2008 6:04 pmby pratikcomputers
Winter.exe /proper.exe cannot be removed by latest mwav in normal/safe mode(created files in system32). Files are created immidiately after deleted by mwav. Selecting scan all files options in monitor setting also not work. Even i cannot create directory by same name in safe mode by deleting both files also.
Posted:
Fri Jan 04, 2008 1:33 pmby vikas
Make sure you have downloaded latest updates. Please send us the debug from your system and Remove following folder from your
C:\PROGRA~1\XPANTI~1\
And send us the latest MWAV log file to us to resolve your problem as early as possible.
Posted:
Fri Feb 22, 2008 5:23 pmby shresthasumesh
in many cases the script files like abc.vbs handles the virus action so first of all make sure that the file Winter.exe /proper.exe is not handled by such scripts for that check for the process wsscript.exe in taskmanager. if u find it then open registry and find userinit key there the default value should be X:\windows\system32\userinit.exe, where X: is the system drive letter besides this is the path of script file.
have fun