Windows, Operating System, Security, Networking, Malware, Support, Forum, Help Site Check Our Facebook Page!
Notices

Register your FREE account to unlock additional features at WindowsBBS.com
 
 
LinkBack Thread Tools
Old 20th May 2005   #1
Inactive
THREAD STARTER
 
Profile:
Join Date: Jan 2002
Location: Vermont
Posts: 52
Computer Experience:
intermediate
hbreder Reputation Level

Trojan Horse "arun.exe" unable to remove


I found every directory of my C drive is infected with a Trojan Horse called "arun.exe". Norton AntiVirus pops up with a High Risk Virus Alert, telling me it was unable to repair this file. I scanned the entire drive and it never once showed up. I checked the virus definitions on the Symantec website; it is not listed. Webroot Spysweep did not pick it up, nor did NoAdware. Anybody have any idea what it does and how to remove it?

hbreder is offline  
Old 20th May 2005   #2
Alumni
 
charlesvar's Avatar
 
Profile:
Join Date: Feb 2002
Location: New Jersey
Posts: 7,033
Computer Experience:
indeterminate
charlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Level

My System
Hello hbreder,

Did a google search:
http://www.google.com/search?hl=en&q...=Google+Search

These are two references that I looked at:
http://www.experts-exchange.com/Secu..._21317829.html

http://www.amzi.com/manuals/amzi6/pr...stribution.htm

Do the on-line scans under security:
http://www.windowsbbs.com/links.php

Norton AntiVirus pops up with a High Risk Virus Alert, telling me it was unable to repair this file.
This doesn't appear to be a mallicious app. Keep in mind that AV's use heuristics as well as signiture definitions which may lead to false positives.

What folder is arun.exe in? Where is it? Bring up the drive/partition, under Tools > folder options > view tab, make sure the hide options are unchecked.

Regards - Charles


Last edited by charlesvar; 20th May 2005 at 17:36.
charlesvar is offline  
Old 21st May 2005   #3
Inactive
THREAD STARTER
 
Profile:
Join Date: Jan 2002
Location: Vermont
Posts: 52
Computer Experience:
intermediate
hbreder Reputation Level

Trojan Horse "arun.exe"


Thanks for your response. It certainly acted like a malicious intruder. NAV kept popping up with warnings which I was unable to close. The file was in the C root and in every C directory. I was unable to delete, got the message: disc full or access denied .... I finally went into Safe Mode on a search and destroy mission and was able to delete every instance, also the Registry entry. Hope this the end of it!

hbreder is offline  
Old 21st May 2005   #4
Alumni
 
markp62's Avatar
 
Profile:
Join Date: May 2002
Location: Coppell, TX
Posts: 4,001
Computer Experience:
Experienced
markp62 Reputation Levelmarkp62 Reputation Levelmarkp62 Reputation Levelmarkp62 Reputation Levelmarkp62 Reputation Levelmarkp62 Reputation Levelmarkp62 Reputation Levelmarkp62 Reputation Levelmarkp62 Reputation Level

The reason Norton can't repair it, as the file itself is the entire thing. A Repair would mean a normal file had viral code inserted into it, and Norton would attempt to remove the viral code.
Why not have Norton quarantine it?
Or go to RAV Online Scan for a second opinion for free?

markp62 is offline  
Old 21st May 2005   #5
Inactive
THREAD STARTER
 
Profile:
Join Date: Jan 2002
Location: Vermont
Posts: 52
Computer Experience:
intermediate
hbreder Reputation Level

Trojan Horse "arun.exe"


Sorry, I did not make myself clear. NAV 2005 did not pick it up when I scanned the drive and therefore could not quarantine it. It just kept popping up with the virus alert windows. So I am not sure why it did not pick it up on a scan. My virus definitions were up to date. Anyway, the problem is solved. Thanks.

hbreder is offline  
Old 21st May 2005   #6
Alumni
 
charlesvar's Avatar
 
Profile:
Join Date: Feb 2002
Location: New Jersey
Posts: 7,033
Computer Experience:
indeterminate
charlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Levelcharlesvar Reputation Level

My System
Hi hbreder,

Good idea to have more than one anti-malware app, especially if your only one is the AV: http://www.ewido.net/en/download/

Webroot Spysweep did not pick it up, nor did NoAdware are not geared up for this sort of thing. Nor I might add is NAV, the only AV that comes fairly close is Kaspersky.

The free Ewido Anti-Trojan version is an on demand scanner, it and the paid resident version are updated almost on a daily basis.

Regards - Charles

charlesvar is offline  
Old 26th May 2005   #7
Inactive
THREAD STARTER
 
Profile:
Join Date: Jan 2002
Location: Vermont
Posts: 52
Computer Experience:
intermediate
hbreder Reputation Level

Trojan Horse "arun.exe"


Thanks. I'll give a try. I still have to clean my backup drive which got infected too.

hbreder is offline  


 

THIS THREAD HAS EXPIRED.

Are you having the same problem? Please post a new thread, but first you'll have to join us by Registering (FREE).



Discussion Forums
Operating Systems
Windows 10 Windows 10
Windows 8 Windows 8
Windows 7 Windows 7
Windows Vista Windows Vista
Windows XP Windows XP
Windows Server System Windows Server System
Legacy Windows OS Legacy Windows OS
Internet & Networking
Networking (Hardware & Software) Networking
Internet Explorer Internet Explorer
Microsoft Mail Microsoft Mail
Firefox, Thunderbird & SeaMonkey Firefox, Thunderbird
      & SeaMonkey

Web Applications & Cloud Web Applications & Cloud
General Internet
Security
Malware and Virus Removal Malware and Virus
     Removal

Security and Privacy Security and Privacy

Other
Other PC Software Other PC Software
Test Posts Test Posts
Hardware
PC Hardware PC Hardware
Mobile Devices Mobile Devices
Community
Introductions Introductions
General Discussions General Discussions
Site Comments & Suggestions Site Comments
      & Suggestions

News News @ WindowsBBS

Thread Tools


Find us on Facebook   Web Of Trust Rating

All times are GMT. The time now is 15:12.


Recent Discussions
New SpywareBlaster updates availabl.. (0)
Invalid IP address error, fixed but.. (3)
Record Blu Ray Disc with Standard O.. (2)
How to change outdated Mail address.. (5)
How to remove undeletable folders (9)
Teluguword setup.exe (8)
Xmas Wish (4)
Hard drive information. (7)
During the sleep mode, it sometimes.. (26)
[Activation issues] (20)
Long Running Scripts (17)
MS Fax and Scan Replacement (23)
dell laptop no operating system fou.. (5)
Information regarding WD My Cloud 3.. (13)
Happy Holidays! (7)


Donate!
Support Windows BBS!



Powered by vBulletin® Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright 2002 - 2014 WindowsBBS.com. All rights reserved.
FDMA Media LLC
Terms of Use, Legal Information & Privacy Policy
Page generated in 0.08692 seconds with 7 queries