Forum     

Go Back   Digit Technology Discussion Forum > Software > Software Q&A
Register FAQ Calendar Mark Forums Read

Software Q&A Having trouble with software? Find solutions here


Closed Thread
 
LinkBack Thread Tools Display Modes
Old 17-10-2004, 11:43 PM   #1 (permalink)
Apprentice
 
Hulo's Avatar
 
Join Date: Sep 2004
Location: Kolkata, India
Posts: 53
Default Help ! Virus or Trojan Problem


There is a file being created in my computer named ec5d8aef.exe . This is created under Documents and Settings - My user folder - temp . Registry entries are being created to load the file at the start and the file is being shown as a process after I press ctrl+alt+del. I removed the process, deleted the file from the temp folder and removed entries from registry. I ran Ad aware and Spybot S&D. The file keeps coming back after some time. The file also tries to connect thru the net and only because I have installed Zonealarm, it cannot do so. The Zonealarm log shows its repeatedly trying to connect.

How do I remove this for good? It appears that this file is being created by some other trojan or virus but I can't find that out.
Hulo is offline  
Advertisements. Register and be a member of the community to get rid of them.
Advertisement

Old 18-10-2004, 12:08 AM   #2 (permalink)
Alpha Geek
 
Join Date: Sep 2004
Posts: 625
Default

- flush all the temp directories for all users
- run updated antivirus for all files , might be another file with different name creating this one
- update the scan engine for the antivirus program too .
- check all programs > startup
- check msconfig > startup
- try safe mode to delete the file next time it appears
klinux is offline  
Old 18-10-2004, 12:33 AM   #3 (permalink)
Coming back to life ..
 
it_waaznt_me's Avatar
 
Join Date: Nov 2003
Location: A bit closer to heaven
Posts: 1,997
Default

Scan your system with updated virus definitions:
Panda ActiveScan
Stinger
Symantec System Check
Kaspersky
__________________
Sleight of hand and twist of fate...
On a bed of nails she makes me wait...
And I wait without you ...
With or without you ..
----
Batty = Too Busy Now !!!
it_waaznt_me is offline  
Old 18-10-2004, 02:59 AM   #4 (permalink)
Alpha Geek
 
sidewinder's Avatar
 
Join Date: Jul 2004
Location: West Bengal
Posts: 625
Default

If u use spybot then with it's advance option startup organizer remove all unrecognised startup prog.Then under services.msc search for a process that is linked to that infected file.Now run the computer is safe mode and run a av that is capable of running in safe mode such as avg ao antivir with updated definitions.I m not sure nav can run in safe mode.....
sidewinder is offline  
Closed Thread

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 
Latest Threads
- by chris

Advertisement




All times are GMT +5.5. The time now is 02:40 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.

Search Engine Optimization by vBSEO 3.3.2