• Investment World
• eWorld
• Catalyst
• Mentor
• Life
• Canvas
• Praxis
• Urban Pulse
• Brand Quest

I have a problem in my PC. This is regarding a virus which has entered through a floppy. It is in the gif format and is an application. The antivirus does not detect this. The problem is that I am not able to delete that from the system. The error shown is "Make sure that the disk is not read-write protected or there is not enough memory". Even after checking all these, I am not able to delete this file. The floppy which is being inserted in the drive gets the virus automatically, since the floppy drive gets activated every 30 seconds. After deleting this from the floppy, it is again created in the floppy automatically as and when the floppy drive gets activated. The virus name that appears is iswarya.exe and msnservice.exe

Some of my friends face the same problem too. Please suggest a solution. - Sandeep

This is an activity of virus `W32.HLLW.Carpet.C' as identified by Symantec. It basically copies itself to the system directory either through c:\windows or c:\winnt and adds the entry "MSNService" = "Windir\MSNService.exe" at the following location in the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Once this is done, it attempts to copy itself to any floppy inserted as Iswarya.gif.exe every 60 seconds.

To get rid of the virus, all you have to do is update your virus definition to the latest and do a thorough scan of the system and delete all the files detected as virus infected. Additionally, you will also need to delete the registry entry made by the virus in the location given above. To do this, please type regedit at start {gt} run press enter. Navigate to the path shone above and delete the entry which has the value `c:\winnt\ MSNService.exe' or `c:\windows\ MSNService.exe'.

Solution by G. Rajah

Article E-Mail :: Comment :: Syndication

Stories in this Section
Time to venture out!

Copyright © 2004, The Hindu Business Line. Republication or redissemination of the contents of this screen are expressly prohibited without the written consent of The Hindu Business Line