July 19, 2008

How to remove Trojan.Brisv.A ? | Removal tool

Trojan.Brisv.A is a Trojan horse that infects multimedia files. This trojan search for multimedia files with extension .asf, .mp2, .mp3, .wma, .wmv and injects additional functionality into the multimedia files it finds. While playing these infected multimedia files Windows Media Player will access a malicious link on the internet. Your computer virus protection must be up to date to deal with this Trojan.

How to remove Trojan.Brisv.A ?

Download and run this Trojan.Brisv.A removal tool from Symantec.

1. Perform Standard procedure for Virus removal.

2. Edit Windows registry and remove these registry subkey:


** If the trojan disabled your "Registry Editor", run this Symantec tool to enable it .

3. Restore these registry entries to default value.(If required)

HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\"URLAndExitCommandsEnabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Extensions\.mp3\"Permissions" = "21"

Try AVG Antivirus Software Free Edition
Virus removal tools

Recent Searches:
manually delete music from registry
norton 360 scan ms-dos prompt
scan says no trojan.brisv.a!inf found, but i know there is
sintomas de trojan.brisv.a
trogen in music file that i can not delete
trojan bypass norton
trojan.brisv fix
trojan.brisv.a folder name
trojanbrisv.a fix tool dos
what does trojan.brisv.a!inf do
where are trojan.brisv.a!inf files located


Anonymous said...

THANK YOU soo much!! i was getting annoyed by this problem. it was affecting all my files. i tried looking for solutions with my antivirus program but it was useless telling me to update and scan. anyways thx so much again and hopefully i wont see those stuff again.

Anonymous said...

Antivirus was useless...manual removal required..wont let me delete them.

Jack said...

Which Anti-Virus u r using ?

Try Kingsoft Internet Security 9




These are best (free ) Antivirus on the internet . Download it , then update for latest virus definitions .

Restart your system in safe-mode .

Then Run a full system scan..

After that edit your registry and remove those values mentioned in the post ..

Amelia said...

Try this Online Virus scanner


Anonymous said...

i deleted the file in the registry and checked if the media player files were the same as what what u said but im still not able to play songs wit my windows media player. can u help?

Vidhu said...

1. Didi you remove the Trojan completely ?

2. Is there any error message while running Windows Media Player?

Anonymous said...

I've downloaded the removal tool, and it basically tells me that the Trojan.Brisv.A!inf, and the Trojan.Brisv.A are different. there is a removal tool for A, but not for A!inf, and i've done everything with the registry and it won't come off.

vidhu said...

Trojan.Brisv.A!inf is a detection method to identify multimedia files on compromised computer that were infected with Trojan.Brisv.A.

Can you mention that removal tool u downloaded ?

Anonymous said...

I've had most of the same problems as you guys. Norton Antivirus said it was high risk and needed manual removal. I tried downloading the Trojan.Brisv.A Removal Tool from Symantec, but it said that it couldn't detect any files. So I'm going to try this out later - thanks!

ivy said...

I have Trojan.Brisv.A!inf too. I've tried:

1) Editing the registry
2) Running Norton AntiVirus 2008 - tells me that you need to manually remove it.
3) Downloading and runnning Symantec's Trojan.Brisv.A Removal Tool. Doesn't work - tells me that Trojan.Brisv.A couldn't even be found.

The only thing I haven't tried is deleting the infected files themself. Norton still detects the virus through those infected files, so I was wondering if I should delete them? Will that solve the problem?

Vidhu said...

Hi Ivy,

You can remove that file if it is not a Windows system file. But be care full.
If Norton is not removing the file means that file is an important one.

Follow these steps.

1. Download this Symantec Trojan.Brisv.A removal tool again to your desktop (If
possible download though another system).


2.Disconnect your network/internet connection.

3. Turn Off your system restore temporarily.


4. Restart your system in safe mode.


5. Locate and run the downloaded removal file again .
 In almost all cases the removal tool/Antivirus must detect the threat
and will remove it in safe mode with no system restore.

6. After running the removal tool. Restart your system normally.

7. Run the removal tool again to ensure that the system is clean.

8. Turn on your system restore.

This will remove the trojan if it is Trojan.Brisv.A .

ivy said...

So does this mean that I have to delete all my music files? If I do, then how will I know if I still have the virus? (If there are no music files to scan?)

Anonymous said...

I had to use the tool in safe mode also before it said that it had cleaned the infected file. I deleted the file anyway. My computer still acts funny in that the Hard drive is always running and performance monitor says that windows is accessing the HD 100% of the time.

ivy said...

Thank you so much! It turns out that all I needed to do was change the Windows registry and then delete all the infected music files. After that, I just rescanned my computer with Norton AntiVirus and it said that my computer was safe. I uploaded music on to my computer to check, and it worked. =D

Thanks again!

Anonymous said...

It won't let me do it in safe mode. when I start up the removal tool in Safe Mode, my computer cuts off after 3 minutes and won't turn back on until I unplug and replug it, or I let it sit for a minute or two.

Vidhu said...

It won't let me do it in safe mode. when I start up the removal tool in
Safe Mode, my computer cuts off after 3 minutes and won't turn back on until I
unplug and replug it, or I let it sit for a minute or two.

Wait 10-15 minutes.

** I assume that you

turned off system restore

If nothing happens restart again, Press F8 and select safe mode with networking.
(This will enable you to connect internet in safe mode.)

Use these online virus scanners to scan your computer completely.

Free Online Virus Scanners

After that update your installed Anti-Virus
and perform a full system scan in safemode.

Akash said...

I tried to edit the registry...but the problem is that there aint no Registry entries as mentioned above....there wasn't any:
Neither cud i find :HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\"URLAndExitCommandsEnabled

And i really can't afford to delete my music files....it's a collection i've built in 4 years
What to do :(

Mike said...


... for this great tool!
... it recovers 90% of my mp3s!
... no infection anymore :-)

Greetings Mike!

(It would be very great, if this tool also repairs .WMA or .WMV file. Do you plan something for such an update ?)

Anonymous said...

I try to run symantec tool but it said i didnt have adminsitrative priviliages even though i am administrator :S

Anonymous said...


I have a very simple solution. I ran the norton tool to remove this virus in a corrupted media file. It failed. I launched windows in safe mode, ran the norton utility. This did not work. I then went to MSDOS command prompt and issued del *.* in the folder where the virus exists. The file and virus was gone, then I ran a scan. Success. From windows the file could not be deleted or moved, it works from MSDOS prompt.

Anonymous said...

Hello i Deleted All my music files and i scanned it again with Norton anti virus and it said that my computer is still infected with Trojan.Brisv.A!inf

Anonymous said...

I downloaded CC cleaner.. then click options- include, and manually removed the files.. but.. I had to delete ALL music files..

however.. so far it seems as though it worked.. I will w/b if it pops up again.

Anonymous said...

Steve said..

Had same problem. Altough, fixed it with alternative solution:

Infected file could not be deleted no matter what but I did overwrite it with the back up I took from from the Data Restore. It really woked.

good luck

Anonymous said...

i try every virus removal and it wants me to buy the soft ware and i can't afford it..cost too much since i already have the norton 360 online and that dont even help me remove the trojan.brisv.a!inf and im getting frustrated..please help me solve this problem..

pie said...

i have norton 360 aswell and isnt the removal tool is for trojan.brisv.A not troja.brisv.a!inf ????
I have run the removal tool and it said i had no virus. but norton still said i had a virus so i deleted my music files. It was all good until today...when i got another warning from norton saying that i have the trojan horse again!

johnny said...

I came across this problem a few days ago and I tried different antivirus programs and adware removal tools, but it is not adware. to correct the problem, I ran a full system scan with norton and I clicked on more details to find the precise file the trojan was located in and where that file was. once you get the location, you will need to start your computer in safe mode and delete the file. then restart the computer in normal mode and run another scan to make sure it is gone. again, trojans are not adware so no adware removal program will help.

Anonymous said...

how would you be able to tell which music file is corrupted with the trojan? I cant tell which file it is at all. Norton just says that my computers infected with it. Please help!

Anonymous said...

1. If you have another computer with Windows XP,

a. Install that computer with free 30 days trial version ESET Smart Security and ESET NOD32 Antivirus v3.0 update it and then shutdown that PC.
b. Remove your infected harddisk from the computer and attach it as secondary harddisk/ slave, Do not forget to attach all other USB storage devices to this PC for scanning.
c. Boot up your spare computer.
d. Scan all storage devices that are connected to your spare PC with newly installed and updated ESET NOD32 Anti virus.
e. ESET NOD32 Anti virus will remove all threats from your hard disk and other storage devices .
f. Shut down the computer and remove your hard disk and attach it to your PC.
g. Bootup your PC, after boot up install a good anti-virus like ESET NOD32 and run a full system scan after disabling "System Restore" .

Anonymous said...

I have the Trojan.Brisv.A!inf on my computer and ive tried the symantec removal tool and may other things, nothing is working, however when i try to goto safe mode, my computer will not let me, upon start up i hit F8 and the screen comes up to switch to safe mode, however safe mode is not an option, the only tihng my computer says is windows XP professional

Anonymous said...

what exact damage can this trojan do? i'm courious...i just got it...:(

Anonymous said...

Hey guys, I just recently had the Trojan.Brisv.A. I tried to remove it with the FixBrisvA tool from Symantec and it did not work for me although I never did try it in safe mode. I scanned my computer to find the exact location of the virus
I opened the Command Prompt and I typed "del c:/users/...." (the exact location without the "") a messaged popped up asking me if i was sure with a Y/N, I typed in Y and pressed enter it took a couple of minutes and the name of the location that was just deleted came up. I ran a scan again and VOILA!!! NO VIRUS!!! YAY!!
Hope it works for you guys!

Anonymous said...

when norton finishes the scan the details shows the location of the virus but i cant find that folder anywhere.? even in safe mode only norton finds the virus but cant remove. I need to manually remove but cant find the folder.

Anonymous said...

Very easy to remove.... first find file that is corruptted look in limewire incomplete. (usually in there) restart pc in safe mode go into sart up- documents- limewire- incomplete- rightclick on each file and delete. then go to recycle bin rigth click on it and delete. Restart pc. rerun anti virus and it will be gone......very easy

Anonymous said...

I ran into some trouble getting rid of this virus. When attempting to remove it using the symantec removal tool (both in normal and safe mode.) In both cases the tool would operate fine but would apparently not locate the infected file, despite it again showing up when I ran a virus/full system scan with Norton. Fortunately for me their seems to have been only one infected mp3 file and i eventually removed it thus.
Trying to remove the infected file by deleting it in 'normal mode' was impossible and the computer responded by claiming I did not "have permission to open this file", and when I attempted to assert ownership of the file to my administrative user account I was unsuccessful. SO...
1. I went into SAFEMODE. (Press F8 when computer first turns on, and select SAFEMODE.)
2. Hightlight and delete the infected file (as identified in the detailed scan results.)
3. Empty 'Recycle Bin.'
4. Restart computer in 'Normal Mode.'
5. Run virus/full system scan and await results.
Their should be no further sign of the Trojan.Brisv.A virus.
Obviously it would be best to clean the given file and save it for future use. Unfortunately though, I have found claims by Symantec's 'FixBrisA' tool and other anti-virus softwares to be able to disinfect the infected multimedia files to be inaccurate. Perhaps reports that this virus is only acivated to its fullest extent when the infected files are played (or attempted to be played) in Windows Media Player are true as I use WinAmp and actually don't think I have actually played this infected file for a few months...lucky me! It does seem a lot of people out there have been far more unfortunate out there.
Anyway hope this helps.

Anonymous said...

I got this trojan.Brisv.A virus last night and have downloaded the virus removal tool. My question is, is it suppose to take forever to run this removal tool? It is so slow. I am not running it in safe mode will this make a difference? I did read a few tips that I will try tonight when I get home.

Anonymous said...

i have numerous problems!!! Norton finds it, i know exactly which file it's attached to. It won't let me delete that file, and when i run the removal tool it says i don't have it.

have started in safe mode, looked for the registry entries, and there not there either, yet when i run norton it finds it again!! Help i'm at the end of my tether!!!

Anonymous said...

My daughter get the virus on her laptop downloading from Limewire. The Trojan.Brisv.A virus really slowed down the computer and infected a few mp3 files. I tried Symantic's removal tool but it could not locate the virus. I found it with Norton's full scan. I finally went to MS DOS and located the directory and file holding the infected file. I already moved all the infected files to one folder. After using the command "cd C:\Users\...." to locate the file, I just enetered "del *.*" All files within that folder were deleted as well as the virus. Restarted the computer and running a Norton full scan at this moment. It looks like the infected file is finally gone... Thank GAwd

Anonymous said...

I ran norton, which told me i had this particular trojan, i then downloaded the remover. Ran it and it said it couldn't find it. So i started it in safe mode and again said it couldn't find it. I then tried to delete the file it's attached to and it wouldn't let me.

Tried to run the removal tool again, then started in safe mode after turning off system restore, tried to find code in the registry, and again not found....I'm at a complete loss as i can't get rid!!! Any advice???

Anonymous said...

Weird how all of a sudden alot of people are getting this virus. I just got it today and the file that was infected was downloaded last February. The Symantec tool didn't work and neither did deleting it in regular operating mode. Gonna try safe mode when I get home.

Anonymous said...

Well norton told me that the virus was in the file low cavalry kids in limewire i pretty much went and deleted ANYTHING that had to do with limewire and now it says its gone but my friends dad says that the virus can regenerate itself so im lost and unsure but the norotn did not detect it but about a week ago AFTER i deleted ALL limewire files it said it was in a file that doesnt exist should i be worried? Or could it be that norton didnt update after i deleted it?

Anonymous said...

Also when i try to run any of my antivirus on safemode it wont work norton says i have to go downlaod something else but i dont have internet in safe mode from some reason and AVG jsyt says it has corrupt installation.

Anonymous said...

Erm I found this Trojan today. Norton found it, i downloaded the removal tool for this virus, said it couldn't be found, so do another norton full system scan, that found it fine.

just tried to find the PIMSRV, and it's not in the file that is suggested?

I'm really confused here.

Vidhu said...

Hi Erm , Try to scan in safe mode with system restore off..

Erm I found this Trojan today. Norton found it, i downloaded the removal tool for this virus, said it couldn't be found, so do another norton full system scan, that found it fine.

just tried to find the PIMSRV, and it's not in the file that is suggested?

Anonymous said...

I tried to change the regedit, but the subkey was not there and I am still getting the error, what am I missing here?

Anonymous said...

After I finished scanning my computer with the Norton 360, the program will not let me look at the exact location of the virus so that I can get ride of it.

Can someone please help?

Also is it possible that if I just delete all my multimedia files I can eventually find the one that is infected and get ride of the virus altogether

Anonymous said...

Hi i have the Trojan.Brisv.A!inf......Ive tried alot of things to get rid of this but still no luck. The one thing i haven't tried is Editing the registry as i do not know how to do this. I know what file it is affecting but wen i try to delete it my computer just freezes. Please any help on this cause i really dont know what to do now. Thank you all x

Kimmko said...

Ok well, my computer it telling me that that virus is gone and i have completely deleted the infected files.
But when I go into normal mode my computer is still running like it did with the Trojan...

anyone else have this problem?

Anonymous said...


David said...

I've also found that entering Windows XP in SafeMode, locating the file and deleting it has been very useful. I managed to isolate my problem doing so. As always, when entering in SafeMode, one should always be careful so as to not delete important System Files. Good Luck to All.

Gryffen said...

thank you...the program listed in this post helped me.