|
|
|
Found a virus.exe file
|
Original Message
|
Name: Connie
Date: February 8, 2006 at 15:32:24 Pacific
Subject: Found a virus.exe fileOS: Windows 98CPU/Ram: Intel Pentium |
Comment: I apologize in advance for not knowing much about the more technical aspects of computers, so I'm hoping someone will be able to help me, in language I can understand. I just happened to be browsing through the folders on my C:\ drive, when I opened a folder called "BOOTDISK" -- and that's where I found a file called "VIRUS.EXE", along with another one that is a shortcut called "Virus". The shortcut is to a file called "virus.pif" that seems to reside in CPQS\QUICKSR\DISKS. I am not sure even sure if the BOOTDISK folder is a normal Windows system folder, or how it got there if it's not. The weird thing is I run Norton Antivirus, as well as HouseCall, regularly. I am freaking out just a bit, and would be ever so much appreciate someone helping me with this. Connie
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: jboy
Date: February 8, 2006 at 16:01:50 Pacific
|
Reply: (edit)That looks to be part of your Compaq utilities - see if you have any documentation Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home
Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: Connie
Date: February 8, 2006 at 17:37:28 Pacific
|
Reply: (edit)Oh really, it's likely not a virus, then? Hmmm, OK, I will look for something like that. I feel much better--thanks for your response.
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: jboy
Date: February 8, 2006 at 17:48:26 Pacific
|
Reply: (edit)I'm not *absolutely* postitive, but the name of the folder (CPQS) sure sounds like it's from Compaq - - and viruses are not typically so obviously named. Should be some documentation in one or another of the folders - you can always submit the file here for analysis Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: Connie
Date: February 8, 2006 at 18:08:27 Pacific
|
Reply: (edit)Haven't found any "documentation", though I guess I'm not really sure what I'm looking for. Thank you so much for the link, jboy. I will definitely do that scan.
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: Connie
Date: February 8, 2006 at 18:40:16 Pacific
|
Reply: (edit)Hmm, the results of the scan were inconclusive: "MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.)" Packers detected: EXEPACK, BAT2EXEC" As it states, none of the scanners found anything, though. Maybe I should add that when I look at the Properties for the file, I get: Created: Tuesday, February 16, 1999 2:58:26 PM Modified: Wednesday, November 04, 1998 5:48:36 PM Accessed: Wednesday, February 08, 2006 So it's not like it's anything new.
Report Offensive Follow Up For Removal
|
|
Response Number 6
|
Name: jboy
Date: February 8, 2006 at 19:30:09 Pacific
|
Reply: (edit)Yeah - that is inconclusive, and can also happen if the file is overly large - file creation dates aren't necessarily ironclad either, but that one may be accurate A little more research shows there are a couple of trojans etc that do go by the name of 'virus.exe' (so much for sweeping generalizations) - but the location of the file sure sounds like some sort of Compaq utility. If Norton and other scans haven't turned up anything, I would tend to think you're ok, and it's just an unfortunately named application - but it never hurts to be vigilant, maybe try another scan at Panda for peace of mind. If your machine came with any sort of help files for Compaq Diagnostics, possibly there's a mention there Regardless - malware files do no harm by just sitting there, they have to be running Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home
Report Offensive Follow Up For Removal
|
|
Response Number 7
|
Name: vika
Date: February 9, 2006 at 04:27:20 Pacific
|
Reply: (edit)Virus.exe is an executable file that is responsible for launching parasites, loading main components of malicious programs and running a destructive payload. File is installed and used by worm W32.HLLW.Syney and trojan Pounds Trojan. Please try Pounds Trojan removal instructions.
Report Offensive Follow Up For Removal
|
|
Response Number 8
|
Name: jboy
Date: February 9, 2006 at 09:04:58 Pacific
|
Reply: (edit)You state that with quite a bit of (unwarranted) certainty From Symantec Trojan.PoundsThis Trojan horse copies itself into the C:\Windows\System folder and configures a registry key so that it runs when Window starts. When it is run, displays a message that a fatal error has occurred. It then displays a window with the following title: Error - - - S#########ER When attempting to identify malware, file name *and* location are just two considerations.
I'm somewhat dubious of that 2-spyware site (and their software) Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home
Report Offensive Follow Up For Removal
|
|
Response Number 9
|
Name: Connie
Date: February 10, 2006 at 07:28:26 Pacific
|
Reply: (edit)Yeah, I did find reference to a "virus.exe" Trojan on the Web, but that doesn't mean this is the same file necessarily, right? I don't seem to have any of the aforementioned symptoms, and have certainly never seen that window jboy mentions. Panda? I'll look for that. And for help files for Compaq Diagnostics. Thanks again, very much, for all the feedback. Connie
Report Offensive Follow Up For Removal
|
Use following form to reply to current message:
|
|

|