I finally have broadband, it took 5 attenpts to get it installed but its now done,
i have a question, i have recently found out that my EXPLORER.EXE is infected with some kind of virus, it is impossible to delete the virus and i cant seem to get it disinfected, is there anything i can do?
if the file/infection name is needed just say and i will post it.
cheers for anyhelp,
<s>Felix</s>

Did you try Norton antivirus or any other virus programs? and if nothing helps the only solution you have is to format the hardrive where the virus is sorry about that Felix! :(

I am afraid formatting might be the only way, if antivirus fails.

However, look at the good side of the thing: you will have a brand new system with top performance and will be able to get rid of all those applications you installed, never used but didn't remove simply because you didn't even rebember them being there.

Argh ill go and d/l that norton thing, i hope i dont have to reformat it ...
even though i could do with a new base unit .... ;)
<s>Felix</s>

Yeap... Broadband... such a wonderfull thing... i've got it too... unfortunetly they only allow you to download and upload 300 megs a month otherwise you get charged 50 bucks a meg or something O_o And we already are paying more than we would for normal 24/7 never-stop-downloadin' broadband . . . *sigh* It's not even fast... *sticks to his 56k for now*

There's much to be said for it... look at all the time you've got while downloading songs to um... do other things... like... stuff... and stuff...

and things!...

------------
http://img.ranchoweb.com/images/1337one/cooldrizzt.gif
<font color="yellow">[i]Currently In The middle of a hurricaine... Be back later...</font>

Explorer.exe is a fairly integral part of windows, therefore windows wont let anything touch it. Its rare for it to get infected because of this, but some viruses do get loaded into memory before windows.

Unfortunatley your virus scanner cant do anything to it, my advice would be to boot to DOS and delete it, and replace with a (clean) copy from another PC. And when I say boot to DOS, I mean use a known clean bootdisk, since viruses have all kinds of tricks to avoid file deletions. Most can even survive a format if their in memory at the time.

A format is probably not necessary, since you can replac this file by hand without to much risk. And norton or whatever should be able to take care of the rest of the system itself.

hmmn i cant see me doing the dos thing, i always cock things like that up...what do you mean by copy from another pc? im confused....
Felix

Only format the drive you have windows on and install it again no more problems NO viruses can survive that so do it and all will be fine and to replace files and stuff dont help i think because the virus can be all over your hardrive not only in explorer.exe!! [img]tongue.gif[/img] I have never had any problems with this so go on it take you about 1,5 houer then all is back to normale!
But first of all TRY Norton Antivirus it is one of the best antivirus program available today!!!! [img]tongue.gif[/img] good luck!

[ 09-28-2002, 11:17 AM: Message edited by: Megabot ]

OK, let me try and explain. Windows has explorer.exe open permanently, since its an integral part of windows itself. Therefore windows refuses to allow anything else to alter the file, which means the scanner cant clean it.

If you reboot to DOS however, windows is out of the way and you can pretty much do what you like. Unfortunatley your virus scanner probably wont run under DOS. So heres what you do:

Go to another computer, one that is virus free.

put a blank floppy in the drive

start-> run -> command (cmd on winNT, 2K or XP)

"format a: /s"

"a:"

"copy c:\windows\explorer.exe"

Now take the floppy out of the PC and put it into your. Enable the write protect tab as well, sicen you dont want the virus to infect this disc.

Reboot your computer. You may or may not have to go into BIOS and reset the boot sequnce, if you do the setting your looking for is "A,C,SCSI".

Anyway, if you get it booting from the floppy you should be looking at a full-screen dos prompt. Windows is not loaded, there is no mouse support. This is the way all machines once were.

Type the following commands:

"cd\windows"

"copy a:\explorer.exe"

YOull now be asked if you want to override the file. Hit "y" to do it.

Take out the floppy, reboot your computer.

I think ill jsut reformat my stuff it sounds much easier....hmm ill have to re-register broadband,
is there a quick way to format my HD? or will it take ages getting rid of everything?
Felix

p.s. i have two copies of explorer.exe open is that normal?

[ 09-28-2002, 11:18 AM: Message edited by: FelixJaeger ]

A bootsector/memory blended threat will survive this by default. Other types can survive it if their designers were good enough.

A friend of mine suggested re-installing windows 98 and clearing my HD from there....would the virus still be around or would that get rid of it?

Reisntalling and then clearing the HDD? wrong way around. It might get rid of it, not all viruses can survive that.

Reisntalling and then clearing the HDD? wrong way around. It might get rid of it, not all viruses can survive that.</font>[/QUOTE]he mentioned an option when you try and reinstall it....either keep your saved documents ... or not....

Reisntalling windows will keep much of the program files, so its more than likley youll need to format the drive and then install windows again from scratch.

it wouldnt let me install it because its the same version or summit daft...
how do i reformat?just a quick rundown...last time i did it i had help from my dads friend...
Felix

YOU WILL NEED:

1 windows isntallation CD. Particularly recommended is windows 98
1 boot floppy. You will end up with no OS on your harddrive, so you need to boot into DOS to install windows.

Start -> run -> command

"format c:"

hit y and go do something interesting for a while

Reboot your computer, booting from the floppy

"D:" or whatever letter your CDROM is

"cd\win98"

"setup"

Follow the instructions.

[ 09-28-2002, 11:57 AM: Message edited by: andrewas ]

Hmm how do you kill the memory virus Andrewas? Do you need the boot diskette or what to do it? I think i read something about it but now i dont remeber! [img]tongue.gif[/img]

But anyway it sound like Felix have that darn D3D virus that DO atack explorer.exe and if he use the Norton antivirus he should get reed of it i think!!

[ 09-29-2002, 02:21 AM: Message edited by: Megabot ]

Depends on the virus. Some viruses can survive various scanners, but no virus is unkillable. NAI have a library which details all the ones they know of. And they know of all but the newest.

The most foolproof method I know of is formatting a drive by putting it in another machine as a secondary. That way the virus never gets loaded into memory and so cant do anything to survive the format.

Scanning a drive in this way should kill all viruses as well, but some viruses can hide from some scanners.

Boy are you getting ripped...my Residential UP allows 10gig a month.

As another user warned, simply formatting may not work. Some virii hide in memory during the format process and immdetiately copy them selves back onto the HD after the format is complete.

You must be very careful about this, power on boot using the winblows CD and then format - this will prevent virii from being loaded from the MBR.

hehe Andrews u should start charging money for this!@

Microsoft does and u don't get this kind of nice and thourough help from them as u have been giving here.

When will people learn to NOT use outlook express for e-mail?? That is the way almost all viruses get into a computer.

<font color="lightblue">Although the format SOUNDS easier, it is infact far harder and not nearly as reliable.
To simplify Andrewas' Instructions to the absolute computer illiterate level:
Plain text you type, blue text you do.

Go to another computer, take a floppy disk (not a CD) with you that has nothing important on it.
Put the disk into the relavant drive.
Go to Start, Click Run,</font> command <font color="lightblue">, press enter.
At the prompt,</font> format a: <font color="lightblue">enter</font>
y <font color="lightblue">enter</font>
CD C:\WINDOWS <font color="lightblue">enter</font>
copy EXPLORER.EXE a: <font color="lightblue">enter

Take the disk out of the computer, take it to the one with the virus. Put it in the drive.
Click Start - Shut Down - Restart
When you come to a black screen with a white flashing line,
</font>
copy A:\EXPLORER.EXE C:\WINDOWS <font color="lightblue">enter</font>
y <font color="lightblue">enter</font>

<font color="lightblue">Take the disk out of the drive.
Hit the computer's reset button.

Praise yourself and rejoice, for you have just replaced a corrupted file. :D </font>

Felix, what you have is WORM_APLORE.A

It spreads through MSN, so gods knows how people can be Stupid enough not to notice it. It actualy inserts a link into the chat and invites people to install it. Amazingly, someone at work just got it which is how I got the ID on it.

http://www.trendmicro.com/vinfo/viru...=WORM_APLORE.A

contains removal instructions.

hexa, taking money from Ironworkers just dosent feel right. ALthough if anyones feeling insane/generous feel free to email me about it :D