How to remove this virus.?

R

rakesh-the gilli

Journeyman
Whenever i copy files from my friend system using my pendrive, i find a folder named "gaxee" inside which a file named "pobronas.exe" resides. I think its a virus, if not please correct me so. I tried removing it by scanning with norton antivirus 2011 but it is unable to detect. My friend uses Mcafee and it too doesn't detect it.. Can someone help me to get rid of this virus. Is there any removal tool available.?
 
Niilesh

Niilesh

Padawan
First check if this is a virus by uploading it to VirusTotal - Free Online Virus, Malware and URL Scanner
it will scan the file with 13 or so antivirus
 
thetechfreak

thetechfreak

Legend Never Ends
Do any of the following-

1) Do scan using this online antivirus.
Link- HouseCall - Free Online Virus Scan - Trend Micro USA
2) Download and install Malwarebytes Anti Malware.
Update it and do full scan.
 
OP
R

rakesh-the gilli

Journeyman
I got rid of it. I was sure that it was the only virus in my system as whenever i formatted my pendrive there was no sign of it, but as soon as i replugged it the folder was created. Tried googling and found that Avira removes it (as updated Norton & Mcafee failed to remove). So i uninstalled McAfee, installed Avira, scanned the system and thankfully it did remove the virus. I manually deleted it from my system using safe mode. The virus resides in

C:\Documents & settings\<user name>\fhwagz.exe

It makes those copies of gaxee folder with pobronas.exe in it. Some registry entries were also removed.
HKEY_LOCAL MACHINE\CURRENT_VERSION\MICROSOFT\WINDOWS NT\WIN_LOGON\TASKMAN.. If this TaskMan dword is present then we have to remove it..
 
thetechfreak

thetechfreak

Legend Never Ends
Good. You may try a software called Spybot search and destroy to do scans once a week
although a little slow,its a very good piece of software. you also get an option to 'immunise the browser' that actually is very helpful
 
Zangetsu

Zangetsu

I am the master of my Fate.
rakesh-the gilli said:
I got rid of it. I was sure that it was the only virus in my system as whenever i formatted my pendrive there was no sign of it, but as soon as i replugged it the folder was created. Tried googling and found that Avira removes it (as updated Norton & Mcafee failed to remove). So i uninstalled McAfee, installed Avira, scanned the system and thankfully it did remove the virus. I manually deleted it from my system using safe mode. The virus resides in

C:\Documents & settings\<user name>\fhwagz.exe

It makes those copies of gaxee folder with pobronas.exe in it. Some registry entries were also removed.
HKEY_LOCAL MACHINE\CURRENT_VERSION\MICROSOFT\WINDOWS NT\WIN_LOGON\TASKMAN.. If this TaskMan dword is present then we have to remove it..
Click to expand...

Norton & Mcafee shud remove the virus dnt knw wats the problem with them :))
 
You must log in or register to reply here.
Top Bottom