CodeGuru Home VC++ / MFC / C++ .NET / C# Visual Basic VB Forums Developer.com
Results 1 to 3 of 3

Thread: HELP!!!

  1. #1
    Join Date
    Jan 2001
    Posts
    4

    HELP!!!

    ok yes i know this is not a programming question
    but... i have utilized this rexsource many times while developing sw and you guys have the answers so now i am in a desperate time

    i got nailed with that trojan 7 virus
    i ran the AntiVirus program from norton
    it found and quartined and then i deleted the file
    all good right?
    wrong
    you see the file infected was phep.exe
    not sure never came across it but apparently
    now nothing on my computer runs since anything i hit gives me a warning dialog saying
    "cant find Phep.exe" file needed to run type 'application' programs
    WHAT DO I DO??!!

    i am screwed right now please help

    thank you
    E+


  2. #2
    Join Date
    Jul 2000
    Location
    Milano, Italy
    Posts
    7,726

    Re: HELP!!!

    You should be able to choose "Ignore" or "abort" or "quit".
    Virus said to your machine it had to be started. When choosing not to start, you say to machine you do not need it. It should not come up again, after choosing "Ignore" (or "Abort" or whatever it is in English the italian "Annulla") and restart PC.
    Troians are bad viruses, but if you keep your antivirus update, you will win this war.
    Best regards,
    Cesare Imperiali

    Special thanks to Lothar "the Great" Haensler. Come back soon, you Guru.
    ...at present time, using mainly Net 4.0, Vs 2010



    Special thanks to Lothar "the Great" Haensler, Chris Eastwood , dr_Michael, ClearCode, Iouri and
    all the other wonderful people who made and make Codeguru a great place.
    Come back soon, you Gurus.

  3. #3
    Join Date
    May 2001
    Location
    California
    Posts
    10

    Re: HELP!!!

    Okay...
    First off, some may disagree w. me but, a trojan is not a virus. A trojan is simply like any other client/server program. A trojan opens up a port on your system that listens for the client to call it up. So you basically have a server running on your system. Now think about this. The server has to be ran everytime you start up your machine to be executed again and start doing its job listening / waiting for a connection.
    This is why you keep getting your error message.

    See when you ran the *.exe file it ran a line of code that updated either your registry or your win.ini file.

    Since I believe you are talking about sub7 bring up your win.ini file. To do this go to start->run->sysedit. Click the box w. the caption of win.ini.
    Look for the RUN and LOAD keys.
    If your run or load look like this
    RUN = phep.exe or C:\Windows\temp\phep.exe
    Load = phep.exe or C:\somewhere\phep.exe
    Simply delete the path of the phep file.
    This will get rid of your error message.
    Every time you boot your machine it read this win.ini file. Your machine then trys to run or load this *.exe file that you deleted hence giving your the error that it cant be found.

    Now check your registry.
    start->run->regedit
    Look in your HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and RunOnce.
    If you see the file name phep.exe in either of those places simple delete those as well.
    And walla, the error message will be gone.

    exceion



Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  





Click Here to Expand Forum to Full Width

Featured