HELP ! Virus ? C.exe ? | FerrariChat

HELP ! Virus ? C.exe ?

Discussion in 'Technology' started by amenasce, Aug 31, 2009.

This site may earn a commission from merchant affiliate links, including eBay, Amazon, Skimlinks, and others.

  1. amenasce

    amenasce Three Time F1 World Champ Silver Subscribed

    Joined:
    Oct 17, 2001
    Messages:
    34,440
    Full Name:
    Joe Mansion
    I think i caught something.

    1- A lot of my softwares arent working. I click on them and nothing happens ( Media player.exe , Spybot.exe, IE explorer etc..)

    2- When im browsing, every now and then, i will have an error message saying connection interrupted even though it is working.

    3- When i ctrl-alt-del, i saw c.exe. It seems to be a trojan ?

    How can i remove it ? I cant launch spybot...
     
  2. Jedi

    Jedi Moderator Moderator Lifetime Rossa Owner

    Joined:
    Mar 18, 2008
    Messages:
    32,273
    Location:
    Seattle Area
    Full Name:
    Dave
    Go here:

    http://www.spywareremove.com/removecexe.html

    Complete removal instructions there.

    Here's a complete description of c.exe:

    c.exe file information

    The process belongs to the software c.exe or Adobe AIR by unknown.

    Description: c.exe is located in a subfolder of "C:\Documents and Settings". Known file sizes on Windows XP are 54,784 bytes (50% of all occurrence), 60,416 bytes.
    There is an icon for this program on the taskbar next to the clock. The program has a visible window. The program has no file description. c.exe is not a Windows core file. c.exe is able to monitor applications. Therefore the technical security rating is 32% dangerous, however also read the users reviews.

    Recommended: Identify c.exe related errors

    If c.exe is located in the Windows Temp folder then the security rating is 32% dangerous. File size is 97,280 bytes. The program has a visible window. There is no description of the program. The file is not a Windows system file. c.exe is able to monitor applications.

    If c.exe is located in the folder C:\Windows\System32 then the security rating is 36% dangerous. File size is 173,056 bytes. The program has a visible window. There is no file information. The program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). The file is not a Windows system file. c.exe seems to be a compressed file.

    Jedi
     
    Last edited: Aug 31, 2009
  3. amenasce

    amenasce Three Time F1 World Champ Silver Subscribed

    Joined:
    Oct 17, 2001
    Messages:
    34,440
    Full Name:
    Joe Mansion
    I tried that but when i try to run spyhunter, it wont start ( like spybot) . It's as if this virus will prevent any of these antivirus to scan my pc...

    And i search for C.exe and couldnt locate it but i did see it in the task manager.
     
  4. powerpig

    powerpig F1 World Champ

    Joined:
    Oct 12, 2008
    Messages:
    11,078
    Location:
    Huntsville, AL
    Full Name:
    Kevin
    Download Malwarebytes free edition, restart your computer and enter safe mode. (F8). Install malware bytes and run it. Should take around an hour or so. Have it delete the stuff it finds and reboot in regular mode.
     
  5. SilverF20C

    SilverF20C Formula 3

    Joined:
    Jun 22, 2004
    Messages:
    1,126
    It probably is doing what you suggest.

    Try this. http://www.sophos.com/support/knowledgebase/article/13251.html

    Read thoroughly and print out the instructions before you start. It basically allows you to run the virus scan from a command line of a CD for example where it can't modify your anti-virus files that you download. It may not be the best or most thorough search but should definitely help at some level.
     
  6. Wade

    Wade Three Time F1 World Champ Owner

    Joined:
    Mar 31, 2006
    Messages:
    32,793
    Location:
    East Central, FL
    Full Name:
    Wade O.
    I'm curious as to what kind of protection you had in place. Which anti-virus were you using etc...

    Thanks
     
  7. Skipatek

    Skipatek Rookie

    Joined:
    Aug 21, 2005
    Messages:
    12
    Let's hope you are lucky and you got the less nasty variant.

    - Go to http://search.appranger.com and download and install the AppRanger program.
    - Do a scan
    - Some of the files you wish to remove will be listed in the unclassified list. Check the ones you wish to remove.
    - Select the reboot option

    PM me if you need help.
     
  8. frefan

    frefan F1 Veteran

    Joined:
    Apr 21, 2004
    Messages:
    7,370
    Not going to help you now but once you get it fixed, stop logging onto your computer as administrator.

    Personally I would backup your files offline, wipe the disk and start over
     
  9. amenasce

    amenasce Three Time F1 World Champ Silver Subscribed

    Joined:
    Oct 17, 2001
    Messages:
    34,440
    Full Name:
    Joe Mansion
    Thanks guys, i will try all of that and hopefully i'll see you on the other side :D
     
  10. TexasF355F1

    TexasF355F1 Seven Time F1 World Champ Silver Subscribed

    Joined:
    Feb 2, 2004
    Messages:
    72,469
    Location:
    Cloud-9
    Full Name:
    Jason
    LOL....my malware bytes takes at least more than 2 hours.
     
  11. the_stig

    the_stig F1 Rookie

    Joined:
    Sep 19, 2005
    Messages:
    3,497
    Some of these nasties put a list in the registry of a bunch of antivirus and antimalware programs that are "disallowed". You can sometimes get around the problem by renaming the executable file for the program that you would like to run.
    Example: If malwarebytes antimalware will not run try renaming mbam.exe to mbam.com or junk.exe.
    At the end of the day you may very well wish that you had backed up your data and wiped the machine for a fresh start.
     
    Last edited: Sep 3, 2009
  12. SilverF20C

    SilverF20C Formula 3

    Joined:
    Jun 22, 2004
    Messages:
    1,126
    Any luck?
     
  13. S Brake

    S Brake F1 World Champ

    Joined:
    Aug 3, 2006
    Messages:
    17,182
    Location:
    Utah
    Full Name:
    Dave
    I had something similar happen this morning, stopzilla was the only thing I could get to open and remove the virus.
     
  14. Ferrariman355

    Ferrariman355 F1 Rookie

    Joined:
    Jul 11, 2004
    Messages:
    2,950
    Location:
    NYC
    Viruses are spreading!

    Hopefully you get out of this one with your stuff still intact - wish I did.
     
  15. S Brake

    S Brake F1 World Champ

    Joined:
    Aug 3, 2006
    Messages:
    17,182
    Location:
    Utah
    Full Name:
    Dave
    Turns out that stopzilla didn't get it all. I started to have weird music and commercials playing in the background whenever we'd open a new window. Super antispyware has a release that gets around the virus that won't let it open. I downloaded that and it found 84 additional items.
    It just might be time for a mac.

    Here is the link that saved my butt
    http://www.superantispyware.com/supportfaqdisplay.html?faq=71
     
    Last edited: Sep 7, 2009

Share This Page