Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help How Can I Remove These Virus


  • Please log in to reply
7 replies to this topic

#1 heltune

heltune

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 30 November 2007 - 06:51 AM

:thumbsup:
help please
i have these files in my c:/rootdrive
"smss.exe and ms-dos.exe"
i know these are not genune files that were created inside my rootdrive
when i try to uncheck the file folder option = hide system file and try to earse the ms-dos and smss in the c:/ driv where it is located it suddenly hides themselves and creates again a copy of themselves... i checked again the folder option box there it again it seems that i checked the hidden system files option where before i did the unchecking... it seems that somethings is making it check itself so that the hiddens files smss and ms-dos will be hidden from c:/...
hope you got what i mean.... sory...

please anyone help me how to remove...

thank you.

Edited by heltune, 30 November 2007 - 06:57 AM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,138 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:40 PM

Posted 30 November 2007 - 08:44 AM

Appears to be malware but anytime you come across a suspicious file which you cannot find any information, the file has a legitimate name but is not located where it is supposed to be, or you want a second opinion, submit it to jotti's virusscan or virustotal.com. In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.

Once you confirm its malware you can do this:

Download FileASSASSIN.zip and save to your desktop (this tool is compatible with Win 2000/NT/XP/Vista only).
  • Create a new folder on your C:\ drive called FileASSASSIN and extract (unzip) the file to that folder. (Click here for information on how to do this if not sure. Win 9x/2000 users click here.)
  • Open the folder and double-click on FileASSASSIN.exe.
  • Select the bad file to delete by dragging it onto the text area or select it using the (...) browse button.
  • Select a removal method. Start with the default "Attempt FileASSASSIN's method of file removal"
  • Click delete and the removal process will begin.
  • If that did not work, start the program again, select the file(s) the same way as before and this time check "Use delete on reboot function from windows."

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 heltune

heltune
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 02 December 2007 - 09:07 AM

thanks for the suggestion anyway
i will try it i hope it will work
thanks... good speed!

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,138 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:40 PM

Posted 02 December 2007 - 10:41 AM

Your welcome.

Post back with the file analysis or if you encounter any problems.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 heltune

heltune
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 04 December 2007 - 02:06 AM

i wasnt able to delete those files sorry...

here are the files... ms-dos(folder) inside it is ntdlr)
smss.exe
autorun.inf

i try to delete those files when windows starts but yet they are still there...
all options i tried yet in vain!

and mind you my flash drive got infected!! goodness!

please help ... that session manager eats my memory!
sometimes deletes my ntdlr original file causing me to run setup again...
i dont want to reformat i dont have a writer and extra HD! for saving files please help!
Thanks!

#6 heltune

heltune
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 04 December 2007 - 08:47 AM

hi again!

it seems smss.exe and ms-dos folder has got to do with the registry...
i tried to find these but i don't know where to find them...
i know that it is not only enough if you delete these files and then the problem will stop, i have to go through the registry and search for those... i dont know where the real culprit hides in windows folder... i really have a lot of soul searching for those files...
anyway my friend really want to use the computer for his project so i dont have a choice but to fix it no matter what, i ran setup again with windows.000 as my main folder... after installation i deleted the old windows folder. i am really sick of that i cant comb thrugh the registry its huge... i deleted also those damn files that keep on reappearing... explorer.exe, foooolsh.exe, msdos and smss.ex with autorun.inf... sorry for not waiting...

thank you for helping me... again my apology...

:thumbsup:

god bless!

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,138 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:40 PM

Posted 04 December 2007 - 08:56 AM

No need to apologize. I'm glad to hear the issue has been resolved.

To protect yourself against malware and reduce the potential for re-infection, be sure to read:
"Simple and easy ways to keep your computer safe".
"How did I get infected?, With steps so it does not happen again!".
"The Ten Most Dangerous Things Users Do Online".
"The 10 Biggest Security Risks".
"Hardening Windows Security - Part 1" and "Hardening Windows Security - Part 2".

Safe surfing and have a malware free day.

Edited by quietman7, 04 December 2007 - 08:59 AM.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 heltune

heltune
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 06 December 2007 - 08:58 AM

ok

god bless...




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users