HELP ! Virus ? C.exe ? | FerrariChat

HELP ! Virus ? C.exe ?

Discussion in 'Technology' started by amenasce, Aug 31, 2009.

This site may earn a commission from merchant affiliate links, including eBay, Amazon, Skimlinks, and others.

  1. amenasce

    amenasce Three Time F1 World Champ
    Silver Subscribed

    Oct 17, 2001
    34,448
    Full Name:
    Joe Mansion
    I think i caught something.

    1- A lot of my softwares arent working. I click on them and nothing happens ( Media player.exe , Spybot.exe, IE explorer etc..)

    2- When im browsing, every now and then, i will have an error message saying connection interrupted even though it is working.

    3- When i ctrl-alt-del, i saw c.exe. It seems to be a trojan ?

    How can i remove it ? I cant launch spybot...
     
  2. Jedi

    Jedi Moderator
    Moderator Lifetime Rossa Owner

    Mar 18, 2008
    32,274
    Seattle Area
    Full Name:
    Dave
    #2 Jedi, Aug 31, 2009
    Last edited: Aug 31, 2009
    Go here:

    http://www.spywareremove.com/removecexe.html

    Complete removal instructions there.

    Here's a complete description of c.exe:

    c.exe file information

    The process belongs to the software c.exe or Adobe AIR by unknown.

    Description: c.exe is located in a subfolder of "C:\Documents and Settings". Known file sizes on Windows XP are 54,784 bytes (50% of all occurrence), 60,416 bytes.
    There is an icon for this program on the taskbar next to the clock. The program has a visible window. The program has no file description. c.exe is not a Windows core file. c.exe is able to monitor applications. Therefore the technical security rating is 32% dangerous, however also read the users reviews.

    Recommended: Identify c.exe related errors

    If c.exe is located in the Windows Temp folder then the security rating is 32% dangerous. File size is 97,280 bytes. The program has a visible window. There is no description of the program. The file is not a Windows system file. c.exe is able to monitor applications.

    If c.exe is located in the folder C:\Windows\System32 then the security rating is 36% dangerous. File size is 173,056 bytes. The program has a visible window. There is no file information. The program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). The file is not a Windows system file. c.exe seems to be a compressed file.

    Jedi
     
  3. amenasce

    amenasce Three Time F1 World Champ
    Silver Subscribed

    Oct 17, 2001
    34,448
    Full Name:
    Joe Mansion
    I tried that but when i try to run spyhunter, it wont start ( like spybot) . It's as if this virus will prevent any of these antivirus to scan my pc...

    And i search for C.exe and couldnt locate it but i did see it in the task manager.
     
  4. powerpig

    powerpig F1 World Champ

    Oct 12, 2008
    11,078
    Huntsville, AL
    Full Name:
    Kevin
    Download Malwarebytes free edition, restart your computer and enter safe mode. (F8). Install malware bytes and run it. Should take around an hour or so. Have it delete the stuff it finds and reboot in regular mode.
     
  5. SilverF20C

    SilverF20C Formula 3

    Jun 22, 2004
    1,126
    It probably is doing what you suggest.

    Try this. http://www.sophos.com/support/knowledgebase/article/13251.html

    Read thoroughly and print out the instructions before you start. It basically allows you to run the virus scan from a command line of a CD for example where it can't modify your anti-virus files that you download. It may not be the best or most thorough search but should definitely help at some level.
     
  6. Wade

    Wade Three Time F1 World Champ
    Owner

    Mar 31, 2006
    32,793
    East Central, FL
    Full Name:
    Wade O.
    I'm curious as to what kind of protection you had in place. Which anti-virus were you using etc...

    Thanks
     
  7. Skipatek

    Skipatek Rookie

    Aug 21, 2005
    12
    Let's hope you are lucky and you got the less nasty variant.

    - Go to http://search.appranger.com and download and install the AppRanger program.
    - Do a scan
    - Some of the files you wish to remove will be listed in the unclassified list. Check the ones you wish to remove.
    - Select the reboot option

    PM me if you need help.
     
  8. frefan

    frefan F1 Veteran

    Apr 21, 2004
    7,370
    Not going to help you now but once you get it fixed, stop logging onto your computer as administrator.

    Personally I would backup your files offline, wipe the disk and start over
     
  9. amenasce

    amenasce Three Time F1 World Champ
    Silver Subscribed

    Oct 17, 2001
    34,448
    Full Name:
    Joe Mansion
    Thanks guys, i will try all of that and hopefully i'll see you on the other side :D
     
  10. TexasF355F1

    TexasF355F1 Seven Time F1 World Champ
    Silver Subscribed

    Feb 2, 2004
    72,470
    Cloud-9
    Full Name:
    Jason
    LOL....my malware bytes takes at least more than 2 hours.
     
  11. the_stig

    the_stig F1 Rookie

    Sep 19, 2005
    3,497
    #11 the_stig, Sep 3, 2009
    Last edited: Sep 3, 2009
    Some of these nasties put a list in the registry of a bunch of antivirus and antimalware programs that are "disallowed". You can sometimes get around the problem by renaming the executable file for the program that you would like to run.
    Example: If malwarebytes antimalware will not run try renaming mbam.exe to mbam.com or junk.exe.
    At the end of the day you may very well wish that you had backed up your data and wiped the machine for a fresh start.
     
  12. SilverF20C

    SilverF20C Formula 3

    Jun 22, 2004
    1,126
    Any luck?
     
  13. S Brake

    S Brake F1 World Champ

    Aug 3, 2006
    17,182
    Utah
    Full Name:
    Dave
    I had something similar happen this morning, stopzilla was the only thing I could get to open and remove the virus.
     
  14. Ferrariman355

    Ferrariman355 F1 Rookie

    Jul 11, 2004
    2,950
    NYC
    Viruses are spreading!

    Hopefully you get out of this one with your stuff still intact - wish I did.
     
  15. S Brake

    S Brake F1 World Champ

    Aug 3, 2006
    17,182
    Utah
    Full Name:
    Dave
    #15 S Brake, Sep 7, 2009
    Last edited: Sep 7, 2009
    Turns out that stopzilla didn't get it all. I started to have weird music and commercials playing in the background whenever we'd open a new window. Super antispyware has a release that gets around the virus that won't let it open. I downloaded that and it found 84 additional items.
    It just might be time for a mac.

    Here is the link that saved my butt
    http://www.superantispyware.com/supportfaqdisplay.html?faq=71
     

Share This Page