Databases (73)
Linux (39)
Outside the Cube (6089)
Programming (679)
Web publishing (65)
Windows (429)
Apache (4)
File Types (33)
Internet Explorer (6)
Network (11)
Passwords (6)
Printing
Processes (13)
Programming (318)
Exchange Links
About this site
| |
 |
New related comments
Number of comments in the last 48 hours
Advanced settings in Mozilla FireFox
1 new comments
Red circle with white cross in taskbar tray - saying 'Your computer is infected'
70 comments. Current rating: 
(13 votes). Leave comments and/ or rate it.
| Belorussian Translation |
Question:
My computer was infected a while ago with Spysheriff and I got rid of it. But I discovered a red circle with a white cross in my taskbar. When I move my mouse over it, it says 'Your computer is infected':
Answer:
This one is easy to get rid off.- Open the task manager (press Control+Alt+Del)
- Select Processes and look for a process named 13242.exe or similar (a pattern of numbers) and kill this process.
Look for a process named Archive.exe and kill it as well.
Note that the name of this other program may be different in your case - a known other name is tool2.exe .
- Search your hard disk for the file name 13242.exe (or whatever number it may have been in your case). In my case this was in:
\Documents and Settings\user1\Lokale Einstellungen\Temp
Other users reported to have found these files in c:\Windows.
As you can see in the screenshot, I found a LOT of executable files there, most of them the length 0. I could not delete those files until I had killed process 'Archive.exe'.
The file archive.exe was entered as an auto-start in the registry here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunI deleted the file Archive.exe from C:\Program Files\Archive:
Directory of C:\Program Files\Archive 11/24/2004 04:21p <DIR> . 11/24/2004 04:21p <DIR> .. 11/24/2004 04:21p 106,496 archive.exe 1 File(s) 106,496 bytes 2 Dir(s) 3,235,689,984 bytes free
| Belorussian Translation |
|
||||||||
Comments:
| You are on page 3 of 5, other pages: 1 2 [3] 4 5 | ||
| ||
|
i don't have any of these files and i have the 'your computer is Infected' I don't download??
| ||
| ||
|
post up the names of the processes here
| ||
| ||
|
I purchased Spyware Doctor, ran it, and all my troubles are gone!! It is $29.95 but worth every penny.
| ||
| ||
|
winstall.exe was my variant. After removing it from my task manager, I performed a simple search for the file 'winstall.exe' and came up with two files. I didn't know which one to delete so I highlighted both files and clicked on 'properties.' One file was created a very long time ago but the other file was created the same day that I was attacked by the spyware. I deleted that file and now my computer is back to normal.
A thousand thanks! | ||
| ||
|
use this site
 http://www.spywared..y-sheriff/ it found mine and i got that damn annoying thing off | ||
| ||
|
In my computer the file was called AOEOSCU.EXE
| ||
| ||
|
Thank you, winstall.exe was the issue for me. Does anyone know why products like Norton don't protect against this?
| ||
| ||
|
hello can you help me please i cant find any of those archive or 13242.exe so can you tel me what to do??
| ||
| ||
|
I am using win me and i gone to some adult site and there i got this virus Spysheriff and i got this Red circle with white cross in taskbar tray ca9396ef.exe.i already rid of that spysheriff but i couldn't delete that red circle,as u mention delete the file with numbers,so i deleted but the file keeps coming back,what should i do,pls help,thanks.
| ||
| ||
|
the latest avg antivirus and windows defender removed it for us norton does not catch half of the viruses avg is the best there is a free version but you have to search for it get it from only the grisoft web site
| ||
| ||
|
i saw one that was xpupdate.exe as well
| ||
| ||
|
my version was in the C;/Program Files as a folder named 'Pest Trap'
| ||
| ||
|
To get rid of the annoying red circle with the white X:
Select run type in MSCONFIG. Go to startup. Find wistall.exe and delete the X from the box. Wistall is the cause of the spyware FALSE information. All will be well. | ||
| ||
|
Go to the following website and follow instructions. It might actually take 2 or 3 tries to complete removal as well as manually removing winstall, bikini and n. Good luck.
http://greatis.com/..l_gviz.htm | ||
| ||
|
showed as xpupdate.exe here, thanks for all the info - finally killed it
| ||
| You are on page 3 of 5, other pages: 1 2 [3] 4 5 |
