Steps to remove Very Dangerous _ex-08.exe Virus

I have no idea if there are any legitimate applications using these file named _ex-08.exe, however it is always possible that some legitimate application may have/ or may incorporate such names in their software, hence take precaution before deleting it.

size: 16.5 KB (sneaky Eh!)

Threat Description

1.It changes/deletes the wallpaper on the desktop. It is a Worm that can can spread by sending an email containing links to copies of itself, Capable of sending out email messages with the built-in SMTP client engine.

2. These are the sites that it tries to download more files from 213.108.56.140, 69.207.209.97, 84.91.40.142

3. These are the files that it creates on the infected computer.

C:\Documents and Settings\All Users\Application Data\78641329\78641329.exe C:\Documents and Settings\[UserName]\Desktop\Security Tool.lnk

C:\Documents and Settings\[UserName]\Start Menu\Programs\Security Tool.lnkC:\Windows\Temp\_ex-08.exe

How to Remove _ex-08.exe Virus

1.The processes _ex-08.exe, 78641329.exe could be seen in the Task Manager which you can End from there.

2.These are the files that it creates on the infected computer. Delete them.

C:\Documents and Settings\All Users\Application Data\78641329\78641329.exe
C:\Documents and Settings\[UserName]\Desktop\Security Tool.lnk
C:\Documents and Settings\[UserName]\Start Menu\Programs\Security Tool.lnk
C:\Windows\Temp\_ex-08.exe

3.If these files are not in the said location, you can nevertheless delete them, wherever they are found. You can use windows search utility to search for the files listed above and delete them.

4.For additional cleaning, you can easily get rid of temp files and obsolete registry entries simply by running a freeware like the CCleaner

For More information above virus threat visit link below

 Threat Expert Report