Click to See Complete Forum and Search --> : HELP!!!


dbum911
March 21st, 2001, 08:10 PM
ok yes i know this is not a programming question
but... i have utilized this rexsource many times while developing sw and you guys have the answers so now i am in a desperate time

i got nailed with that trojan 7 virus
i ran the AntiVirus program from norton
it found and quartined and then i deleted the file
all good right?
wrong
you see the file infected was phep.exe
not sure never came across it but apparently
now nothing on my computer runs since anything i hit gives me a warning dialog saying
"cant find Phep.exe" file needed to run type 'application' programs
WHAT DO I DO??!!

i am screwed right now please help

thank you
E+

Cimperiali
April 13th, 2001, 10:52 AM
You should be able to choose "Ignore" or "abort" or "quit".
Virus said to your machine it had to be started. When choosing not to start, you say to machine you do not need it. It should not come up again, after choosing "Ignore" (or "Abort" or whatever it is in English the italian "Annulla") and restart PC.
Troians are bad viruses, but if you keep your antivirus update, you will win this war.
Best regards,
Cesare Imperiali

Special thanks to Lothar "the Great" Haensler. Come back soon, you Guru.

exceion
May 24th, 2001, 07:33 PM
Okay...
First off, some may disagree w. me but, a trojan is not a virus. A trojan is simply like any other client/server program. A trojan opens up a port on your system that listens for the client to call it up. So you basically have a server running on your system. Now think about this. The server has to be ran everytime you start up your machine to be executed again and start doing its job listening / waiting for a connection.
This is why you keep getting your error message.

See when you ran the *.exe file it ran a line of code that updated either your registry or your win.ini file.

Since I believe you are talking about sub7 bring up your win.ini file. To do this go to start->run->sysedit. Click the box w. the caption of win.ini.
Look for the RUN and LOAD keys.
If your run or load look like this
RUN = phep.exe or C:\Windows\temp\phep.exe
Load = phep.exe or C:\somewhere\phep.exe
Simply delete the path of the phep file.
This will get rid of your error message.
Every time you boot your machine it read this win.ini file. Your machine then trys to run or load this *.exe file that you deleted hence giving your the error that it cant be found.

Now check your registry.
start->run->regedit
Look in your HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and RunOnce.
If you see the file name phep.exe in either of those places simple delete those as well.
And walla, the error message will be gone.

exceion