Get all your news in one place.
100’s of premium titles.
One app.
Start reading
The Guardian - UK
The Guardian - UK
Technology
Jack Schofield

Missing Trojan file in Windows

I recently downloaded Avast antivirus software and deleted five files. Now when I boot up, an error message says: Windows cannot find "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00003.exe" etc. How can I stop this message appearing? Is the file important? David Sweeney

Probably ibm00003.exe (the number can vary) was part of the W32.Spybot.Worm -- a Trojan used to steal passwords -- so the first thing to do is to change all of yours, especially ones connected with home banking and shopping. The Trojan was set up to load with Windows Explorer, and now you have (correctly) deleted the file, Windows is simply telling you it can't find it. You need to tell Windows to stop looking for it.

Possibly the simplest way is to download HiJackThis. Close Internet Explorer and other applications and run HJT to scan your computer and produce a list of things that are being loaded. Almost all of these will be fine. However, there should be a line that says: F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00003.exe". Check this line and click Fix Checked.

Symantec says that W32.Spybot is "a family of worms that spreads using the KaZaA file-sharing network and mIRC" (Internet Relay Chat).

Sign up to read this article
Read news from 100’s of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.