ISE32.exe usually hides on C:\RECYCLER\. It also create a folder name 'RECYCLER' and 'autorun.inf'
on your thumb drive or external drive.

ISE32.exe can also use the following names:
  • SUSPEITOS/WINDOSS.EXE
  • EXE32.EXE
  • IRZ[n].EXE
  • WINDOSS.EXE
  • 40378584.DAT
  • 92239921.DAT
  • 23419202.DAT
  • KK2[n].EXE
  • FOLDER.EXE
  • 10220403.EXE
  • K85DFDRFSDGT[n].EXE
  • SS1[n].EXE
  • B143GT[n].EXE
  • BOT[n].EXE
  • 64970665.EXE
  • SWDF.EXE
  • SYSTI.EXE
  • SYESTE.EXE
  • SYSTR.EXE
  • SYSTQ.EXE
  • SYSTZ.EXE
  • JHKJKJ.EXE
  • SYRSF.EXE
  • SYSF.EXE
  • SYWQT.EXE
  • DYDE.EXE
  • AVVAQ.EXE
  • IS2[n].EXE
  • 95741567.EXE
  • JUF34.EXE
  • WINDLL.EXE
  • IRC[n].EXE
How to detect you have this virus?
  1. Insert a flash disk, thumb drive or etc.
  2. If it has a folder name 'RECYCLER' and 'autorun.inf'
  3. Try delete the folder name 'RECYCLER' and 'autorun.inf'
How to remove:
 1. Remove all your thumb drive, pen drive or etc from your computer.
 2. Open 'Folder Option'. Choose show 'show hidden files and folders' and untick 'Hide
      protected operating system files (Recommended)'.


 3. Delete this file:
C:\RECYCLER
C:\autoexec.bat
C:\c.exe


 4. Open 'Registry Editor' and don't close this yet because we need this later.



 5. Open 'Search' or press 'F3' on your keyboard to search files and folder.



 6. Search this keyword 'ise32.exe'.
 7. Delete the files that come from 'Prefetch'. Usually that have extension '.pf'. Warning!
 8. Open 'Task Manager', find 'Explorer.exe' under the image name. Right click the image 
     name and choose 'End Process'. Don't close this yet.



 9. Back to 'Registry Editor', press 'Ctrl + F' and search for 'ise32.exe'(without the '').



10. Delete all registry that have same name as 'ise32.exe' (without the'').Warning!
11. After that, go back to 'Task Manager'. Hover your mouse to 'File' and navigate to 'New
      Task (Run...)'. Click 'OK'.




12. A 'Create New Task' windows will pop up. Type 'explorer.exe' and click 'OK'.



Warning!
DELETE file that have the 'ise32.exe' keyword and have '.pf' extension.
DONT delete registry like 'unwise32.exe'.
Delete the wrong file and registry may cause your computer unstable.

Technorati Tags: , , , ,