Biju
Keymaster
Post count: 220

Hi Raman,

This question is quite out of our topic. But I'll anwer it anyway, since you are an Lenvica HRMS user :)

The virus is called : WMI Sync-DB. And you should have a file in this path: C:\Windows\System32\wmisynd.exe

But you cannot find this file with your windows explorer, when the virus is active.

Try the following to remove the virus.

1. Goto Services. (Right click on 'My Computer' -> Manage -> Services)
2. Stop/Disable the services with similar names as 'WMI Sync-DB'
3. Restart your machine
4. Now, wmisynd.exe should not be visible in your task manager.
5. Go to C:\Windows\System32\wmisynd.exe, delete it yourself.

This should solve your problem.

Regards,
Biju.

Click here to see the latest Lenvica HRMS Product Line