Virus Alert – MICROSOFT.EXE

A file called microsoft.exe may appear as "Microsoft Update" or as a "Configuration Loader". In fact, it is part of the W32.HLLW.Gaobot.JB virus.

This virus uses an IRC port (Internet Relay Chat) to allow a remote user to access your system. They can download and execute files, send the worm to other users, or launch "denial of service" attacks on websites that appear to have come from your system. This virus also adds itself to your Task Scheduler so that it can run at preset intervals.

We'd recommend removing this file using WinPatrol. First, go to your Active Tasks tab and kill the file there. Next, go to Startup Programs and disable it there. Finally, click on your Scheduled Tasks tab and remove the file there.

Less commonly, Microsoft.exe may also install with: W32.Gaobot.AFJ - http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.afj.html

W32.HLLW.Zule - http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.zule.html

W32.HLLW.Parved - http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.parved.html

W32.Bolgi.Worm - http://securityresponse.symantec.com/avcenter/venc/data/w32.bolgi.worm.html

Virus

Remove