Okay, so I was away for a couple of hours, and it seems my sister has downloaded something from the internet on my computer, complaining that internet was too slow on hers.
Anyway, I've now got something named b.exe starting up every time I reboot.
I've already deleted the file itself, so I decided to start looking for where it starts up.
I fired up regedit.exe, and searched for anything containing b.exe, one thing came up; a key with the name "Name" and value "b.exe" in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication.
Can I delete this key, or not?
[url]www.malwarebytes.org/mbam.php[/url]
Description: File b.exe is located in a subfolder of "C:\Documents and Settings". Known file sizes on Windows XP are 60,416 bytes (25% of all occurrence), 69,632 bytes, 97,280 bytes, 76,800 bytes.
There is an icon for this program on the taskbar next to the clock. The application has no file description. The file is not a Windows system file. b.exe is able to monitor applications. Therefore the technical security rating is 51% dangerous, however also read the users reviews.
Download Hijack This and delete it that way if it's still in the processes. Also check msconfig to make sure it's not going to start up when you turn the computer back on.
lol i just got this 2 days ago.
look for a.exe b.exe and c.exe, and also msa.exe
and delete every .tmp file in your temp folder.
i didnt even need a virus scanner to help me delete it. its a retarded virus.
I've indeed checked google, and will look into this malwarebytes thing, but the thing is, can I delete this key? It's the only reference to b.exe I could find in the register.
Ok, I'll delete every .tmp file in the Temp folder.
and yes delete that key.
MBAM will fix it
Also where did you find msa.exe?
[QUOTE=Hufterkruk;17780459]Also where did you find msa.exe?[/QUOTE]
C:/Windows
[QUOTE=CombineGuru;17780474]C:/Windows[/QUOTE]
this.
its like the dumbest trojan i've ever seen. even MS Defender detected it.
[QUOTE=CombineGuru;17780458]MBAM will fix it[/QUOTE]
My friend had this virus, but it closed and deleted MBAM every time we tried to run it, even in safe mode. Not sure if it was this b.exe or something even more sneaky we couldn't detect at all, but we had to eventually format it out of frustration.
[QUOTE=Catdaemon;17780566]My friend had this virus, but it closed and deleted MBAM every time we tried to run it, even in safe mode. Not sure if it was this b.exe or something even more sneaky we couldn't detect at all, but we had to eventually format it out of frustration.[/QUOTE]
lol. b.exe doesnt even do anything. if you kill it in taskmanager, it doesnt come back till a restart.
Same thing happened to my friend, but after ending the processes, mbam ran fine.
MS Defender did nothing for me, MBAM, on the other hand, fixed it, and found a couple of other small things. Thank you, CombineGuru (it almost rhimes).
[QUOTE=Hufterkruk;17780868]MS Defender did nothing for me, MBAM, on the other hand, fixed it, and found a couple of other small things. Thank you, CombineGuru (it almost rhimes).[/QUOTE]
K. But this isn't a WinDefend thread.
Don't let people who don't know how to not get virusses on your computer, or pay for some antivirus software. You could just password you computer completely through the bios (I think, some motherboards don't let you, but I could do if I wanted, requires a password when you get to the boot screen).
Yeah but short one jumper and the BIOS password is cleared :angel:
hey i got this too!
Search A through C.exe and delete them manually will be a slow fix, but MBAM will get all of them and better in the long run.
[QUOTE=FFStudios;17783049]Search A through C.exe and delete them manually will be a slow fix, but MBAM will get all of them and better in the long run.[/QUOTE]
1 restart isnt really a slow fix.
Sorry, you need to Log In to post a reply to this thread.
