Virus : wmisynd.exe

[Anonymous]

#19005

Hi,

I'm using Lenvica HRMS – Professional for a long time. Recently my PC is very slow.

Finally I found the reason. A file 'wmisynd.exe' is asking for internet access and I'm unable to stop this process. I wanted to know is it okay to delete the file without losing any functionality.

Ragards,
Raman.

[Biju]

#19732

Hi Raman,

This question is quite out of our topic. But I'll anwer it anyway, since you are an Lenvica HRMS user :)

The virus is called : WMI Sync-DB. And you should have a file in this path: C:\Windows\System32\wmisynd.exe

But you cannot find this file with your windows explorer, when the virus is active.

Try the following to remove the virus.

1. Goto Services. (Right click on 'My Computer' -> Manage -> Services)
2. Stop/Disable the services with similar names as 'WMI Sync-DB'
3. Restart your machine
4. Now, wmisynd.exe should not be visible in your task manager.
5. Go to C:\Windows\System32\wmisynd.exe, delete it yourself.

This should solve your problem.

Regards,
Biju.

Click here to see the latest Lenvica HRMS Product Line

[Author]

Posts