Help to remove this file

Printed from http://www.compatdb.org/support/topics/179884_help_to_remove_this_file.html

Help to remove this file - 04/05/08 02:38 AM

Hi,

My sister's computer every time when running Internet Explorer 7, I noticed a short message appear on the 1st line of IE tool bar, " Virus is now ATTACKING your system from MAnz_Shidah".
I scanned with antivirus/anti-spyware but could not fine any affected files.

The only 2 log files I found on HijackThis were:

a) HKLM\..\run:[manz_shidah_virus]wscript.exe
C:\windows\system\manz_shidah.js

b) HKCU\software\microsoft\internet explorer\main, Windows
title = Virus is Attacking your system

I also noticed there were a Jscript file = Manz_shidah and HTML document = Attach your system appeared on all harddisk partitions which were not be able to delete.

Please help, thanks

Re: Help to remove this file - 04/05/08 04:20 AM

Hijackthis can remove the registry entries and if you go into the misc tools section of Hijackthis you can select files to remove at reboot.

Re: Help to remove this file - 07/03/08 05:59 AM

Your antivirus can not find the affected files? That is a new virus?

Re: Help to remove this file - 07/07/08 11:35 AM

Hello,
When I download programs from the internet fresh download keeps popping up and asks me to register. It won't let me download anything. I removed it in the controll panel and used an antivirus program to unistall it. It went away for a few days then it came back and I can't find it on my computer.

Pease help, thanks