Computing.Net > Forums > Security and Virus > Can't remove Troj_imiserv.c

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Can't remove Troj_imiserv.c

Reply to Message Icon

Name: TMatthews
Date: November 13, 2004 at 16:04:07 Pacific
OS: Windows xp
CPU/Ram: ??
Comment:

Tried spybot, adaware, and cannot remove this trojan. Can you help?

Tracie



Sponsored Link
Ads by Google

Response Number 1
Name: murve
Date: November 13, 2004 at 18:07:15 Pacific
Reply:

hi tracie,
lets do the following:
first off disable your system restore, this will flush out your restore folder and all the bad stuff that's hanging around.
next:
get your latest anti-virus and anti-trojan defs.
if you don't have an anti-trojan, go to www.thepublicworks.com, go to payware section and link to trojan hunter, download free 30 day trial and get latest defs.
then do the following:
reboot your computer into safe mode then:

Open Registry Editor by doing this:

Click Start>go to Run, then type in REGEDIT, then hit Enter.
Go to the following registry key:
HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>Run
On the right side, find and delete this entry:
Win Server Updt = "Windows\win32\wupdt.exe"
then go to the hot key:
HKEY_CURRENT_USER>Software>intexp
In the right panel, locate and delete the following values or entries:
• Date = "<Current Date>"
• Version = "<trojan version number>"
Close the Registry Editor.
Then Reboot Your Machine into safe mode and do the following:

Open Windows Task Manager by hitting the CTRL+ALT+DELETE buttons
then click the Processes tab to see the task or process list.
In the list of running processes, find the above mentioned file(s) found earlier.
Select one of the detected files, then press either the End Task or the End Process button, depending on the version of Windows on your system.
Do the same for all these trojan files in the list of running processes.
Do a check to see if the trojan processes have been closed by closing the Task Manager, and then open it again.

Also you may want to do a search for any and all those files you deleted if any are found delete them from your windows directory.

next:
do the following also in safe mode:
empty your cookies folder, recent folder, temp folder and temporary internet folder.
then empty your recycle bin.

next:
scan your computer with both anti-virus and anti-trojan, delete if found all files they come up with.

next:
reboot into normal mode and re enable your system restore.

all the best,
murve


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Can't remove Troj_imiserv.c

IRC in C:\winnt\inf can't remove www.computing.net/answers/security/irc-in-cwinntinf-cant-remove/5428.html

Adware can't removed objects www.computing.net/answers/security/adware-cant-removed-objects/11986.html

viruses found but can't remove them www.computing.net/answers/security/viruses-found-but-cant-remove-them/2495.html