Spyware removal - confused with system files

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am using Windows XP Professional.

I downloaded a spyware by accident and after removing it using Microsoft
Antispyware, I deleted the following file thinking that it was with the
spyware:

C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe

At logon, I get an error message that says:

"Windows cannot find ""C:\Program Files\Common Files\Microsoft Shared\Web
Folders\ibm00001.exe"". Make sure you typed the name correctly, and then try
again. To search for a file, click the Start button, and then click Search"

I still don't know whether the file is required by the system or a part of
the spyware.

How can I solve this problem. What should I do to stop the error message
from displaying.
 
In
Dil said:
I am using Windows XP Professional.

I downloaded a spyware by accident and after removing it using
Microsoft Antispyware, I deleted the following file thinking that it
was with the spyware:

C:\Program Files\Common Files\Microsoft Shared\Web
Folders\ibm00001.exe

At logon, I get an error message that says:

"Windows cannot find ""C:\Program Files\Common Files\Microsoft
Shared\Web Folders\ibm00001.exe"". Make sure you typed the name
correctly, and then try again. To search for a file, click the Start
button, and then click Search"

I still don't know whether the file is required by the system or a
part of the spyware.

How can I solve this problem. What should I do to stop the error
message from displaying.
Click to expand...

It's not part of Windows....but it's probably still in your startup. Go to
Start | run, type msconfig <enter> go to the startup tab, and untick what
you like/doesn't exist any longer.
 
My msconfig Startup tab contains just 2 items.

one for Microsoft Antispyware and another for Acrobat Reader quick load
something

There is nothing related to ibm00001 or any other startup program

Is there any other place where i can configure startup items other than
msconfig?
 
Dil said:
My msconfig Startup tab contains just 2 items.

one for Microsoft Antispyware and another for Acrobat Reader quick
load something

There is nothing related to ibm00001 or any other startup program

Is there any other place where i can configure startup items other
than msconfig?
Click to expand...

The ibm000001.exe is part of a password-stealing trojan. You computer is
still not clean. That particular malware can be tricky to get rid of.
I'd suggest you go through the malware removal steps listed here, doing
everything systematically with updated tools in Safe Mode:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

You may need to run HijackThis and post your log to one of the forums
listed at the site above (not here, please). Or take your machine to a
professional computer repair shop for cleaning (not your local version
of BigStoreUSA).

After you get your computer cleaned up, see these sites for tips about
practicing "Safe Hex" so you don't get infected again:

http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight

Don't forget to change all passwords because you have been compromised.

Malke
 
Back
Top