locked
server.exe virus in windows XP professional SP2 RRS feed

  • Question

  • I got some virus probably from my friend's pen drive.

    Here are its details.

    When I log into my account I got a message INTERNET EXPLORER HAS ENCOUNTERED A PROBLEM AND NEEDS TO CLOSE.

    So after getting this message again and again I started digging my pc for possible causes then I found something new in my C:\Windows\Install there was a file named SERVER.EXE having an icon just like a JPG or JPEG have. Furthermore I found a file named SERVER>EXEP9uri(something like that. I forgot the alphabets after EXE). I deleted both the files. But it happens to be there after every two seconds.

    Additionally I found something in my Regsitry HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\ and HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\  DWORD Value Name: HKCU  Value Data: C:\WINDOWS\system32\install\server.exe

    Can you please help me in removing this virus. I've Windows Security Essentials installed on my PC and have also tried windows malicious software removal tool but no gain.

    Sunday, May 22, 2011 10:12 AM

Answers

  • I got it solved can you please tell me how to remove it?
    • Marked as answer by Leo Huang Tuesday, May 24, 2011 5:36 AM
    Tuesday, May 24, 2011 4:39 AM

All replies

  • As this forum focuses on Windows SteadyState specific issues, this inquiry would best be posted to Windows XP forum:

     

    http://social.technet.microsoft.com/Forums/en/category/windowsxpitpro

     

    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us.  Thank you for your understanding.

     

     

     

    Regards,

    Leo   Huang


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, May 23, 2011 8:11 AM
  • I got it solved can you please tell me how to remove it?
    • Marked as answer by Leo Huang Tuesday, May 24, 2011 5:36 AM
    Tuesday, May 24, 2011 4:39 AM
  • You can just delete the thread.

     

    Regards,

    Leo   Huang

     

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, May 24, 2011 4:52 AM
  • I can't find any option to delete or remove this thread. Can you please guide me how to do this?

    thanks


    SMB
    Tuesday, May 24, 2011 5:33 AM
  • Ok,

    I will help you to close this thread.

     

    Regards,

    Leo   Huang


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, May 24, 2011 5:35 AM
  • I'll be grateful for that leo
    SMB
    Tuesday, May 24, 2011 5:43 AM