Virus deleting all exe's

Status
Not open for further replies.

Candy_girl

Posts: 54   +0
Hello :)

Today the electricity went off and then after that I opened Netscape you know to surf the net so I got this weird message telling me that there are files unreadable and corrupted , files in the appilication data concerning my netscape profile and such!

So I uninstalled netscape , reinstalled it hoping this message would go away but still it's there! so I restarted the computer and suddenly all the softwares on the computer are gone! but not the windows just the program files on one of my other drives .

I tried deleting that folder that it kept saying there's an error in but it won't delete it comes back every time I delete it , I searched google for a program that would permantely delete the file but still nothing!

I don't know what to do? I scanned with norton and it didn't show anything! I'm really confused here? is there somehting I'm missing here?

Please somebody help ?

Thanx a lot in advance!
 
what were you doing before the blackout happend?
do you have a good quality surge/overload protector? (not the cheap $5 ones you buy at normal shops) it might have been due to a powersurge in your pc..
run chkdsk in dos prompt (or goto my comp>(right click)[HDD drive]>properties>tools>error checking)
 
i did the chkdsk and i got this.....

What shall i do now ?

Convert lost chains to files (Y/N)? y
556 KB in 52 recoverable files.
Windows found problems with the file system.
Run CHKDSK with the /F (fix) option to correct these.
5,114,692 KB total disk space.
408,084 KB in 570 hidden files.
8,428 KB in 1,953 folders.
3,206,664 KB in 20,348 files.
1,490,952 KB are available.

4,096 bytes in each allocation unit.
1,278,673 total allocation units on disk.
372,738 allocation units available on disk.

C:\Documents and Settings\Administrator>chkdsk/F
The type of the file system is FAT32.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N) y

This volume will be checked the next time the system restarts.
 
i tried killbox and it couldn't delete the files :(

system restore is not monitoring on my HD , so there's nothing to restore.

any other ideas on how to delete those files.... :)
 
run safe mode is the most obvious, that is, if penddant's methods fail (dont see how tho), and yes, the name of the folder and/or its path would be helpful to know..

for next time i sugest to you to buy yourself a good quality surge/overload protector (ups optional.. if you have spare cash somewhere) like from belkin or aps or something... they stops headaches :)
 
Oh I'm sorry for not clarifying much I was just shocked of what happened so!

Ok here's the path of part of the weird file!

C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\avgqxkbf.slt\DDDDDDDDD.DDDD.DDDDDD

there are others that have that weird repeated letters like that one!

Ok so if I run the safe mode I'd be able to delete it easier?

Thank you soo much your help :)
 
Candy_girl said:
i did the chkdsk and i got this.....
Convert lost chains to files (Y/N)? y
556 KB in 52 recoverable files.
Windows found problems with the file system.
Run CHKDSK with the /F (fix) option to correct these.​
What shall i do now ?
Whenever you see lost chains, get this fixed first
before you allow any installs or deletes! Run CHKDSK /F more than once.
You might like to review/inspect the recovered files before you proceed.
Take an immediate backup, contemplate carefully the situation, and consider
multiple choices of action before you do anything else. Sadly, making a poor
choice often leads to a full blown disaster, when a considered choice will get
things back to normal. Haste makes waist really applies here.
 
so it is a dos virus? Because people have been known to write a virus in dos which just deletes all .exes or converts them or w/e.
 
It does not have to be a DOS virus. People can write virii in diferent languages to accomplish the same thing.
 
Status
Not open for further replies.
Back