Trojan.Brisv.A!inf
Trojan.Brisv.A!inf is a detection for a various malicious and infected multimedia files that were endangered with Trojan.Brisv.A. Trojan.Brisv.A!inf tries to search the infected computer for files with the extension of .mp3, .wmv, .wma .mp2 and .mp3 and converts, insert a functionality to download malicious code from a remote server.
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7
How to Remove Trojan.Brisv.A!inf:
FIRST AID TO STOP Trojan.Brisv.A!inf:
Computers who got infected with Trojan.Brisv.A!inf will have some alterations on system settings. The Trojan modifies Windows registry to configure Windows Media Player settings. If a restore point is saved before getting compromised, you can use System Restore to repair any damages the Trojan has made. System Restore does not actually repair it, instead replaced modified version of files with the original one.
MANUAL REMOVAL OF Trojan.Brisv.A!inf:
1. If an anti-virus program is present, update the definition file.
2. Reboot Windows in Safe Mode
- After turning on the power, press F8 on the keyboard.
- From the menu, select Safe Mode.
3. Run a full system scan and clean/delete all infected file(s).
4. Carry out another full scan after rebooting the computer in Normal Mode.
ADDITIONAL TOOLS AND PROGRAMS:
Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove virus and unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.
Technical Details and Additional Information:
Other functionalities of this Virus:
- Trojan.Brisv.A!inf will look for and infect multimedia file using the following extensions: .asf, .mp2, .mp3, .wma and .wmv.
- The Trojan converts .mp2 and .mp3 files to .WMA format automatically.
- It may upload itself to unsecured file-sharing network.
Mostofa
Aug 03, 2008 @ 05:38:50
How can I remove the virus named Trojan.Brisv.A!inf on my computer?
webmaster
Aug 04, 2008 @ 01:08:11
Hi Mostofa, dont have a copy of the trojan so we dont have a chance to test the cure. You may try to download malwarebytes antimalware.
http://www.precisesecurity.com/tools-resources/adware-tools/malwarebytes-anti-malware
chelly :)
Feb 03, 2009 @ 15:53:00
Help me! My virus scanners (AVG and Norton 360) say that I have a “Trojan.Brisv.A!inf” Virus. I tried to remove it and I even downloaded the remover specially made for the virus but it couldn’t detect it. it’s on a MP3 file which I downloaded, I can’t delete the file. what shall I do to get rid of the virus? Please help me! Thanks!
bipbop
Feb 04, 2009 @ 13:10:32
Thanks phil gee! It worked!
Benbee
Feb 04, 2009 @ 13:40:52
I had the same problem, but when I deleted the first file it then jumped and multiplied to other music files. I had to delete my music files from every user to get rid of this Trojan.
Thanks for the help.
Phil gee
Tyler
Feb 06, 2009 @ 00:56:16
How do you locate the source of the file?
Chris
Feb 07, 2009 @ 10:23:24
Hi chelly,
You can remove that file if it is not a Windows system file. But be care full.
If Norton is not removing the file that means that file could be an important one.
Follow these steps.
1. Download this Symantec Trojan.Brisv.A removal tool again to your desktop (If
possible download though another system).
www . symantec.com/content/en/us/global/removal_tool/threat_writeups/FixBrisvA.exe
2.Disconnect your network/Internet connection.
3. Turn Off your system restore temporarily.
4. Restart your system in safe mode.
5. Locate and run the downloaded removal file again .
In almost all cases the removal tool/Antivirus must detect the threat
and will remove it in safe mode with no system restore.
6. After running the removal tool. Restart your system normally.
7. Run the removal tool again to ensure that the system is clean.
8. Turn on your system restore.
This will remove the Trojan if it is Trojan.Brisv.A .
Ryan
Feb 09, 2009 @ 06:45:21
Thanks a lot Phil! Your method worked perfectly.
Angie
Feb 09, 2009 @ 16:58:59
Help! I ran the removal tool, it doesn’t detect the virus. Norton 360 still says that it’s there though. Any ideas? How do you figure out exactly which file is infected?
Amin
Feb 09, 2009 @ 20:29:31
Angie -> I have the same problem.
He can’t detect the virus. But yet Norton 360 is on alert.
How to remove it?
Levi
Feb 09, 2009 @ 21:29:17
I have the same virus on my 32 bit Vista, I tried the Symantec removal tool with recovery mode off and it didn’t work, then I tried it in safe mode and it said it found and removed the virus, but Norton says its still there, so I called a Norton tech who basically did all the same things that I did (for free) by remote-controlling my PC, but of course Norton said it’s still in “unresolved history”, and “quarantine”, but the Norton tech insisted that it was not in my PC anymore. I actually don’t believe the tech because there is still Trojan.Brisv.A!inf activity going on in my PC like Norton tells me. Chriss’ method above of removing the Trojan is the only consistent solution I have seen in many hours surfing for the truth, but it didn’t seem to work, can someone give us some answers here? Why has the Trojan been active for 7+ months and Norton hasn’t patched it’s anti-virus to remove it? Why are they looking to charge us $100 US through their “premium services” for removing a Trojan that their anti-virus was supposed to prevent in the first place? How the hell do we get rid of this Trojan? I guess it’s all about the money huh. -NeverUsingNortonEverAgain-
kyle
Feb 10, 2009 @ 02:11:36
Norton Antivirus says that I still have this virus yet the file was already deleted. Any ideas why this is?
Vik
Feb 10, 2009 @ 12:23:18
Same problem as you Angie, Amin and Kyle.
Norton will give you the infected file location if you click on the highlighted virus Trojan.BRisv.A!inf indication.
Suggest if you are in XP to remove System Restore and then physically remove the file by deleting it from the Recycle Bin also.
Run the tool in Safe mode. Restore “System Restore” in normal mode and run the FixBrisvA tool again. For safety run a full system scan after downloading the latest DAT files (Live update if you are using Norton). It should finally work.
Good luck.
Dave
Feb 12, 2009 @ 03:11:50
I also have this Trojan on my laptop. Downloaded and ran the removal tool normally and in safe mode. After running the tool it said it was deleted but after restarting and running a full virus scan with Norton it showed that I now had 2 of these Trojans. Anyone who can offer help would be great. Thanks.
Emily L.
Feb 18, 2009 @ 23:16:15
And Also, Norton 360 detects where the threat is located. It is in a music download folder, can I just delete it. Will there be any problem?
billy
Feb 20, 2009 @ 03:48:25
I have the same virus… I love the advice as well , but my Internet isn’t working. I know this is kind of vague, but I am connected to my wireless connection but when I open my browser it tells me that it can’t be displayed! is this related to the Trojan? sorry for grammar…I’m doing this on my phone…hence the no Internet!!
cheers
Nick
Feb 23, 2009 @ 22:05:16
Same problem w/ Norton saying I still have (2) brisv.a and I am not paying $100 dollars to let them fix it. The removal tool says its removed and after that my computer didn’t act funny like it was before so I’m just going to take it’s word as long as its running fine. Also, I thought about deleting it through Norton (although it says its not safe to) but I think it would be okay now.
Tric
Feb 24, 2009 @ 00:25:09
Hey I have same virus. Tried using my Norton Antivirus but it said I have to manually remove it, so I found the file and deleted it but every day it’s still there on my scan. That doesn’t make any sense, I deleted the file. How is it still there with the virus?
Dark Phoenix
Feb 24, 2009 @ 02:54:02
Category Viruses and Spyware
Type Trojan
Troj/Pushu-Gen is a family of Trojans for the Windows platform.
When members of Troj/Pushu-Gen are installed one of the following files is usually created:
\system32\drivers\ip6fw.sys
\system32\drivers\netdtect.sys
\system32\drivers\secdrv.sys
These files may be registered as a new system driver service named for example “Restore”, “Ip6Fw”, “NetDetect” or “Secdrv”. Registry entries are created under:
HKLM\SYSTEM\CurrentControlSet\Services\
When members of Troj/Pushu-Gen are installed the following file is also usually created:
\system32\drivers\runtime.sys
Tric
Feb 25, 2009 @ 15:33:25
OK. I finally got it off! yeah! apparently it was in more than one spot and so I didn’t delete it all when I did it the first time. So I just deleted it again and then emptied my trash can. It’s gone. Woke up to my daily morning scan. NO VIRUS’ found!
Michael W
Mar 08, 2009 @ 17:45:22
Found the way to get rid of Norton alerts about the virus. First of all don’t even bother with the removal tool, its a worthless piece of crap.
1. Put your computer into safe mode and find the file infected(You should be able to find which file was infected through the threat description that Norton gives you, just look through that)
2. You should be able to delete it then, once you delete it restart your computer and log in normally
3. Run a custom scan of the files that were infected, if you did everything right you should show up all clear
4. Then find unresolved security risks on Norton (its easier to find when you click on quarantined items then use the drop down menu to find it)
5. Once your there click on the icon next to the virus name and info
6. Then ignore what Norton recommends just go ahead and click on remove.
7. If everything was done right then you just fought off that virus totally free of charge, and now you got some ideas for next time something infects you.
Good luck to all of you and I hope all of us be a little more careful next time we’re on limewire.
Lucy
Mar 08, 2009 @ 23:35:24
My Norton Antivirus says I still have the Trojan virus, even the the Symantec removal said it removed it. Is there another way to remove the virus, it’s still there?
Nikki
May 22, 2009 @ 14:48:27
Can anyone tell me what a windows system file is?
I have a Trojan horse keeps popping up continuously in symantec quarantine so I found the file and couldn’t delete it, so I went into safe mode and deleted it, but I’ve just read a post above saying that I shouldn’t delete Windows system files! I have no idea what one is so i didn’t take it off safe mode in case my computer won’t ever start again,
It was in C/Windows and was called oyvbs.hnc
Can anyone help?
Next time I think I’ll take my laptop to someone who knows what they are doing.
jeanie
Jul 02, 2009 @ 02:30:34
i have windows vista and Norton 360 in my unresolved is saying i have 2 trojan.brisv.a!inf and when i downloaded the Symantec tool and went into safe mode its saying i don’t have any but my comp is running slow music keeps playing random and i can’t shut it off and things keeps displaying on my screen. does anyone know how to fix all this. i was gonna do a system recovery but I’m not sure if that would work.