virus help?
- Thread starter chris330
- Start date
Try the security section:
http://www.computerforum.com/131398-important-please-read-before-posting.html
http://www.computerforum.com/131398-important-please-read-before-posting.html
voyagerfan99 i tried downloading ur malware program and get same message, when i try to run the program i got a msg that says
"windows cannot open this file
file:1.50.1.1100.exe
to open this file windows need to know the program that created it windows can go online and look it up automatically or you can manually select a program from your computer"
this same msg comes up for every icon on desktop and every program in the all programs from start menu??????
"windows cannot open this file
file:1.50.1.1100.exe
to open this file windows need to know the program that created it windows can go online and look it up automatically or you can manually select a program from your computer"
this same msg comes up for every icon on desktop and every program in the all programs from start menu??????
I've moved this thread to the security section.
To the OP,
Please boot to safe mode and do the following.
Download and run this
http://download.bleepingcomputer.com/grinler/rkill.scr
This should stop any active infection from stopping you from running any exe files. After running rkill, a log will pop up listing what infections it has temporarily killed. Do not reboot the system until you run malwarebytes.
Post both mawlarebytes and hijackthis logs from regular bootup mode.
To the OP,
Please boot to safe mode and do the following.
Download and run this
http://download.bleepingcomputer.com/grinler/rkill.scr
This should stop any active infection from stopping you from running any exe files. After running rkill, a log will pop up listing what infections it has temporarily killed. Do not reboot the system until you run malwarebytes.
Post both mawlarebytes and hijackthis logs from regular bootup mode.
This is one of the reasons that I partition my drives into the lagest number of partitions I can. What I do is count the letters available, C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V, = 20, (W, X, Y, &Z, are reserved for DVD Drives and Flash sticks), then divide my available HDD space by 20 to arrive at partition size. I make them all the same size so in the event of problems, things can readily be transferred from one partition to another. Usually it is the "C" partition which gets screwed up in one way or another, whether it be viruses, bad sectors or whatever, because that is where "Windopes" resides.
What you want to do in this case is run an AV program from your CD ROM drive, because the only other way I can see for you to clean up this mess is to "Format C" which is where the virus WILL be found. EDIT : (Correction, thought of another way to cleanup your mess if you have another HDD you can use temporarily. See end of post)
In my case, I go to some lengths to move other software to "D" drive which is named "Software" in my machines, and contains :
1) Downloaded install programs of all kinds sorted by types,
2) Motherboard files : Bios updates, Manual, and Utilities for various types of Mobos
3) Licences : A folder containing the various serial numbers for the software I hold licences to use
4) Windopes Update installation files
5) Hardware Driver installation files and related software supplyed by the hardware manufacturer.
6) An XP Software Folder which is subdivided into the following folders :
a) Artwork : Which contains all programs related to Pictures
b) Audio : Which contains all programs related to Sound.
c) CD Creator : Which contains all programs related to burning CDs and DVDs,
d) Games : Which contains all Game installs. (Though I am not big on games.)
e) Internet : Which contains all programs related to browsing the internet.
f) Utilities : Which contains all utilities, INCLUDING Antivirus.
g) Video : Which contains all programs related to Video playback and editing.
h) Writing : Which contains all prgrams related to writing.
Needless to say, my "D" partition has its own backup partition which on this machine is "Q". Further I make it a practise to locate "D" as the front partition on a drive other than the one holding "C", This speeds up operation, and since I do the same thing with my swap file, it means that when you are running a program under "Windopes" instead of having one set of read heads wearing themselves out chasing back and forth over "C" drive between "Windopes", The "Windopes" swap file, and the program you are running, you are using 3 sets of read heads, one for each of the 3 items being accessed; = FASTER.
Another thing about this setup is I can format "C" if I have to, with minimal loss; since all that resides there is "Windopes" and its most closely related functions.
Getting back to your problem, you could try taking the drive out of the machine, substituting another drive, running a "Windopes" install on that drive, (complete with antivirus install), then reinstall your infected drive set as a "Slave", and run the antivirus program to check it.
What you want to do in this case is run an AV program from your CD ROM drive, because the only other way I can see for you to clean up this mess is to "Format C" which is where the virus WILL be found. EDIT : (Correction, thought of another way to cleanup your mess if you have another HDD you can use temporarily. See end of post)
In my case, I go to some lengths to move other software to "D" drive which is named "Software" in my machines, and contains :
1) Downloaded install programs of all kinds sorted by types,
2) Motherboard files : Bios updates, Manual, and Utilities for various types of Mobos
3) Licences : A folder containing the various serial numbers for the software I hold licences to use
4) Windopes Update installation files
5) Hardware Driver installation files and related software supplyed by the hardware manufacturer.
6) An XP Software Folder which is subdivided into the following folders :
a) Artwork : Which contains all programs related to Pictures
b) Audio : Which contains all programs related to Sound.
c) CD Creator : Which contains all programs related to burning CDs and DVDs,
d) Games : Which contains all Game installs. (Though I am not big on games.)
e) Internet : Which contains all programs related to browsing the internet.
f) Utilities : Which contains all utilities, INCLUDING Antivirus.
g) Video : Which contains all programs related to Video playback and editing.
h) Writing : Which contains all prgrams related to writing.
Needless to say, my "D" partition has its own backup partition which on this machine is "Q". Further I make it a practise to locate "D" as the front partition on a drive other than the one holding "C", This speeds up operation, and since I do the same thing with my swap file, it means that when you are running a program under "Windopes" instead of having one set of read heads wearing themselves out chasing back and forth over "C" drive between "Windopes", The "Windopes" swap file, and the program you are running, you are using 3 sets of read heads, one for each of the 3 items being accessed; = FASTER.
Another thing about this setup is I can format "C" if I have to, with minimal loss; since all that resides there is "Windopes" and its most closely related functions.
Getting back to your problem, you could try taking the drive out of the machine, substituting another drive, running a "Windopes" install on that drive, (complete with antivirus install), then reinstall your infected drive set as a "Slave", and run the antivirus program to check it.
Last edited:
Do you have 2 or more HDDs in your machine ? or if not do you have another machine ? or at least a spare HDD kicking around ? You would also need either a Noton antivirus disk, if you want to boot from your CDROM drive and run the Antivirus program that way, or a windows installation disk if you don't have an antivirus disk that can run from CDROM.
K, The best cheap fix I can suggest is :
1) Shut down your computer.
2) Open up your computer's case and remove the HDD from it. Handle it gently trying to avoid bumping it in any way.
3) Examine the drive visually to determine what kind it is. IDE or SATA
4) If IDE set the jumpers on the drive to "Slave"
5) Find a friend who also has a computer WITH ANTIVIRUS INSTALLED who is willing to help you by allowing you to install your drive as an additional drive in their machine.
6) Make sure everything is plugged in properly then boot the computer while pressing the delete key to enter the bios. NOTE Some proprietary machines don't use the delete key but rather some other key.
7) when inside the bios check to see if your drive is being recognized and that it is NOT set as the boot drive.
8) If your drive is showing up as either the primary slave or the secondary slave then reboot the machine into windows and run your friend's antivirus program on your windows partition. The drive letters will be different from what you are used to; but if you have Named your windows partition, the name should remain unchanged.
9) When the virus is found, DO NOT attempt to "Disinfect the infected file" Delete the sucker instead.
1) Shut down your computer.
2) Open up your computer's case and remove the HDD from it. Handle it gently trying to avoid bumping it in any way.
3) Examine the drive visually to determine what kind it is. IDE or SATA
4) If IDE set the jumpers on the drive to "Slave"
5) Find a friend who also has a computer WITH ANTIVIRUS INSTALLED who is willing to help you by allowing you to install your drive as an additional drive in their machine.
6) Make sure everything is plugged in properly then boot the computer while pressing the delete key to enter the bios. NOTE Some proprietary machines don't use the delete key but rather some other key.
7) when inside the bios check to see if your drive is being recognized and that it is NOT set as the boot drive.
8) If your drive is showing up as either the primary slave or the secondary slave then reboot the machine into windows and run your friend's antivirus program on your windows partition. The drive letters will be different from what you are used to; but if you have Named your windows partition, the name should remain unchanged.
9) When the virus is found, DO NOT attempt to "Disinfect the infected file" Delete the sucker instead.
Last edited:
So you are saying you have a pirated version of windows? If so, sorry but we can't help you anymore. You need to buy a genuine microsoft operating system and install it.