battlesite
Premium
join:2001-03-24
Studio City, CA
| Can I Manually Delete a Virus?
My AVG Antivirus found a Trojan Horse Dialer, named "CNTR835.EXE" in my Windows/Temp file. When I tried to have AVG move it to the Virus Vault, it informed me that it was unable to remove it, and my computer is still infected.
I can easily find it by opening up "My Computer," but what am I supposed to do to permanently get rid of it? |
|
Vampirefo
Premium,MVM
join:2000-12-11
Huntington, WV
 ·Comcast
| Can you send me a copy of the CNTR835.EXE ?vampirefo@yahoo.com I will run it and tell you how to get rid of it.
PS, You might have to disable AVG to get rid of Trojans/Viruses cause AVG locks the file and wont let you delete it.
--
Spam Officially Legal |
|
battlesite
Premium
join:2001-03-24
Studio City, CA | Okay, I'll send it to you now.
I do not want to just delete it because I am afraid that that might just put it out of my reach, without necessarily disabling it. |
|
battlesite
Premium
join:2001-03-24
Studio City, CA | reply to Vampirefo
Wait a minute. Will Hotmail allow me to send an attached virus? Well, I'll give it a shot. I assume you know what you're doing. |
|
Vampirefo
Premium,MVM
join:2000-12-11
Huntington, WV | Should be no problem, if a problem occurs place the file in a zip and password protect it with the word trojan.
--
Spam Officially Legal |
|
battlesite
Premium
join:2001-03-24
Studio City, CA
| I just tried to attach it to my e-mail, when I located it, and clicked on "open" to attach it, I got this message:
-------------------------------------------------------
c:\Windows\Temp\CNTR835.EXE
You do not have permission to open this file.
See the owner of the file or an administrator to obtain permission.
-------------------------------------------------------
Is this due to my AVG trying to lock it up? |
|
K McAleavey
Premium
join:2003-11-12
Voorheesville, NY
| reply to battlesite
Copy of that sucker as well to support@nsclean.com as well? Vampirefo does not share 'samples" with other malware prtectors, so have to ask separately ...
And as is the case with *ANY* suspected nastiness, PLEASE submit to the "master list" so that whoever your choice of nastiness prevention may be, we can ALL get a sample and see if it happens to be something *NEW?*
Been an AWFUL lot of "new" lately. 
"Alms for the poor" are appreciated. 
--
Kevin McAleavey support@nsclean.comhttp://www.nsclean.com/ |
|
Sparrow
Crystal Sky
Premium
join:2002-12-03
Sachakhand
| reply to battlesite
How to create a password protected zip file:
For Windows XP:
1. Using Windows Explorer, locate the first file you want to zip.
2. Right click on the file and select “Send To” and “Compressed (zipped) Folder”.
3. Right click any other files you want to compress and select “Copy”.
4. Right click on the compressed folder and select “Paste”. The copied files will be compressed and pasted in.
5. Right click on the file and select “Explore”.
6. In “File” select “Add a Password”. Enter the password and confirm the password.
Earlier version of Windows:
1. Download a zip utility such as WinZip if you don't already have one. (Evaluation version.)
Other zip utilities can be found at Free Downloads.
2. Using Windows Explorer, locate the first file you want to zip.
3. Right click on the file and select “WinZip” and “Add to Zip File”.
4. In “Add to Archive” enter the path and name you want your zip file to have.
5. Click “Password” and enter the password you want the zip file to have.
6. Click “Add”.
7. On the WinZip window that appears, click “Add” and select any other files you would like to add to your zip file.
8. When you are done, select “File” and “Close Archive”.
(Taken and modified from Security Forum FAQs with special thanks to keith2468  .)
--
Security Forum FAQs..-..“Let the heart be quiet and hear out the mind."..-..Starfire "5 in 4" |
|
Vampirefo
Premium,MVM
join:2000-12-11
Huntington, WV | reply to battlesite
This could be AVG are you on a limited User account?
--
Spam Officially Legal |
|
Vampirefo
Premium,MVM
join:2000-12-11
Huntington, WV
·Comcast
| reply to K McAleavey
said by K McAleavey :
Vampirefo does not share 'samples" with other malware prtectors, so have to ask separately ...
That's incorrect information, I have sent you several files, but seeing you don't send me none in return, I don't send you any.
I share with those that share with me.
--
Spam Officially Legal |
|
battlesite
Premium
join:2001-03-24
Studio City, CA
| reply to Vampirefo
said by Vampirefo :
This could be AVG are you on a limited User account?
It's the free version, on my own personal computer.
Oh, by the way, I'm using Windows 98 SE, on a three-year-old e-machines e-tower, Celeron processor, 433mhz, 256 Megs of RAM. |
|
battlesite
Premium
join:2001-03-24
Studio City, CA | reply to Sparrow
Crystal Sky, thank you for the zip file instructions. I just printed them out. I'll give them a shot. |
|
jimkyle
Btrieve Guy
Premium
join:2002-10-20
Oklahoma City, OK
 ·AT&T Southwest
| reply to battlesite
You may have to reboot the machine into Safe Mode; to get to Safe Mode, hit F5 when the self-test screens finish but before the Windows logo appears. You should get a menu of options, and option 3 is to boot into safe mode. This disables much of the Windows functionality, so that you can get to files that otherwise would be blocked from you.
Once you have the baddie copied into a zip file, you can delete it or simply change its file type from "exe" to "bad" to keep it from starting again, then reboot back into normal mode to upload it. |
|
battlesite
Premium
join:2001-03-24
Studio City, CA | reply to battlesite
Sorry everybody, WinZip cannot open the file to read and zip it.
Jimkyle, I'll try your suggestion, and reboot into Safe Mode |
|
Vampirefo
Premium,MVM
join:2000-12-11
Huntington, WV | This is AVG blocking access to the file, AVG is going to have to be disabled.
--
Spam Officially Legal |
|
virus deleter
@167.1.x.x
| reply to battlesite
There are many ways to delete a virus manually, first you should llok at the string of processes. Pick out the pair that are causing the disturbance. (now this is where it gets tricky) You must delete that pair and re-create it using a creation module. I will try and get a link for the creation module and keep us updated. |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
| reply to Vampirefo
said by Vampirefo :
but seeing you don't send me none in return, I don't send you any.
If Kevin doesn't send you none, he must send you some
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. |
|
damox
Premium
join:2002-01-07
Olympia, WA
·Comcast Formerly ..
| reply to battlesite
said by battlesite :
I do not want to just delete it because I am afraid that that might just put it out of my reach, without necessarily disabling it.
I don't think there are any viruses that sophisticated yet . . . but then again. Personally I'd delete it, but I'd check the registry for traces, and I'd also run something other than AVG, like an on-line scan to be certain that you're OK. Of course you've checked to see what processes are running on your computer. I don't know why, but I always find viruses and Trojan's fascinating when I find them on a computer. I always have to wonder how they got there . . . sometimes it's obvious because a user has admitted clicking on an attachment, but sometimes there is just no obvious explanation.
--
DAMOX |
|
Sparrow
Crystal Sky
Premium
join:2002-12-03
Sachakhand | reply to battlesite
Also, check in Tools > Internet Options > Connections, and make sure there are no added entries other than your ISP in Dial-up and Virtual Private Network Settings. |
|
dp
Premium,MVM
join:2000-12-08
Greensburg, PA
·Verizon Online DSL
| reply to battlesite
Check 'Disable Resident Shield' and reboot. Then you should be able to do anything you want with the file (zip it up and send it to those who requested it). Don't forget to clear the Resident Shield box and reboot to get your AVG protection back.
--
Write your questions down on the back of a $20 dollar bill and send them to me |
|
