PDA

View Full Version : VERY NEW need help


steveosh
06-11-2004, 05:25 PM
hi first please know i am very new to this and at my wits end trying to figure something out.

my newphew put a small program on my computer, ( i think it is a virus like... but norton does not see it or thinks its a virus.) anyways i delete the .exe file and the next time i restart my computer there it is again.

he installed it... is there a way i can open the .exe file in a program and see where it installed different extensions .. i have tried deleting everything with the same name but that doesn't work.)

can i open it and be able to read where and what extensions it put on my computer... basically track what extensions it reads or needs...

thanks

steveosh
06-11-2004, 05:29 PM
thing is when it was downloaded all it was, was a .exe file.. as soon as he ran it ... things went nuts..

its on a timer almost.. and after almost exactly 15 mins.. a window pops up....

i just do not want to reformat my drive thats all

Celtboy
06-11-2004, 05:39 PM
this should probably be moved to the Computer / PC Discussions Forum.

No, there really isn't any simple way to disassemble the bugger.

Go here: http://www.spychecker.com/program/hijackthis.html

and download and run hijackthis. Post the hijack this output back here on the forum.

Your best best is to delete the offending application's startup->related procedure...perhaps another application is creating the file automatically on startup? Hijack this will let us know which apps are running on startup...we'll be able to figure it out...i hope ;)

-Celt

K-1
06-18-2004, 06:46 PM
I have had similar problem with Norton being unable to help while I'm being attacked. If you would like to try a better anti-virus program, you could try NOD32 (http://www.eset.com), Ad-aware (http://www.ad-aware.com) is also a good tool for finding spyware. When all else fails, use Hi-jack this, and manually remove the bug.

scroots
06-19-2004, 12:29 AM
press Ctrl+Alt+Del to bring up running proccesses, kill it and then remove it from the startup procceedure. Then delete the program.

After a restart it should be gone (ie no longer running).

scroots