bucketheadfan
Joined: 09 Nov 2009 |
Posts: 0 |
|
|
 |
Posted: Sat Nov 14, 2009 5:28 pm |
|
 |
 |
 |
 |
desktop.ini, EXCEL.EXE, excelcnv.exe
They keep making copies of themselves and i cant get rid of them can someone help me
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Nov 15, 2009 2:23 am |
|
 |
 |
 |
 |
It sounds like those files are infected, and there is also a control file that checks and reinfects the computer if they are missing. However, have you actually verified they are infected by submitting them to Jotti or Virus Total? Anubis at https://anubis.iseclab.org/ or Threat Expert at https://www.threatexpert.com/submit.aspx on the web will actually run a file for you and give you a report. If the file is a javascript, pdf, flash or an html page, Wepawet at https://wepawet.iseclab.org/ on the web will run it and give you a report.
If you are sure there is an infection, get into Windows Safe Mode (F8 repeatedly upon bootup until Safe Mode comes up). Run a ClamWin in scan Safe Mode. Some viruses are unable to hide from you in Safe Mode. If that doesn't help, you might try an online scan with Eset's NOD32 program. If that doesn't help, download the free version of Malwarebytes' Antimalware program at https://www.malwarebytes.org/index.php on the web. If nothing has worked so far, you might try installing Microsoft's Security Essentials antivirus at https://www.microsoft.com/security_essentials/ on the web. It's really pretty good and can even find some rootkits, as can Malwarebytes. Finally, check out the ClamWin Antimalware page for more help.
Regards,
|
|
streetwolf
Joined: 14 Nov 2009 |
Posts: 0 |
|
|
 |
Posted: Sun Nov 15, 2009 4:19 pm |
|
 |
 |
 |
 |
Those IMO are the false positives that so many of us are getting. I get the same ones.
Perhaps what's happening is that Windows via it's protection mehanism is automatically restoring the Excel files. Desktop.ini will always be recreated.
I don't think any malware is involved here.
|
|