Virus 5-2-100-157.exe. How remove?

[hondolane]

Please, how remove the virus 5-2-100-157.exe

 

[AVChap]

This is a porn dialer. You'll need to find the file and delete it PLUS remove any instances of it being called from the registry and the startup folders.

AVChap

 

[Kento]

Press ctrl + alt + del then end task on 5-2-100-157.exe. If 'openme' is listed there end task on that too. Then find 5-2-100-157.exe and delete it. If openme was listed there then find openme.exe and delete it also. Then if you found openme.exe get and run Ad-aware which is free. It should remove that openme.exe dialer for you.

http://www.lsfileserv.com/index.html

If openme.exe was not found then click start--run--type msconfig--ok. Open the startup tab and see if you see a line that looks something like this...

C:\Windows\regedit.exe /s C:\Windows\System\radxxxx.tmp

...where xxxx are random letters and/or numbers. If it's there uncheck it. Also under the startup tab see if you see a line referring to Win32.hta. If it's there uncheck that too. Then after restarting search for the radxxxx.tmp file shown in your msconfig and delete it. Then restart again. Do you get any errors? If so let us know what they are and tell us what operating system you have. Also run another virus scan. Is the virus gone?

This thread may help also. Click here: javascriptpenindex(450,350,'

http://www.tipmaster.com/includes/refinfo.cfm?w=450&h=350')

 

[Kento]

That link got messed up. Try this one:

thread760-240207

thread760-240207