1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Trojan Horse "arun.exe" unable to remove

Discussion in 'Malware and Virus Removal Archive' started by hbreder, 2005/05/20.

Thread Status:
Not open for further replies.
  1. 2005/05/20
    hbreder

    hbreder Inactive Thread Starter

    Joined:
    2002/01/27
    Messages:
    52
    Likes Received:
    0
    I found every directory of my C drive is infected with a Trojan Horse called "arun.exe ". Norton AntiVirus pops up with a High Risk Virus Alert, telling me it was unable to repair this file. I scanned the entire drive and it never once showed up. I checked the virus definitions on the Symantec website; it is not listed. Webroot Spysweep did not pick it up, nor did NoAdware. Anybody have any idea what it does and how to remove it?
     
  2. 2005/05/20
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hello hbreder,

    Did a google search:
    http://www.google.com/search?hl=en&q=arun.exe&btnG=Google+Search

    These are two references that I looked at:
    http://www.experts-exchange.com/Security/Win_Security/Q_21317829.html

    http://www.amzi.com/manuals/amzi6/pro/pug_distribution.htm

    Do the on-line scans under security:
    http://www.windowsbbs.com/links.php

    Norton AntiVirus pops up with a High Risk Virus Alert, telling me it was unable to repair this file.
    This doesn't appear to be a mallicious app. Keep in mind that AV's use heuristics as well as signiture definitions which may lead to false positives.

    What folder is arun.exe in? Where is it? Bring up the drive/partition, under Tools > folder options > view tab, make sure the hide options are unchecked.

    Regards - Charles
     
    Last edited: 2005/05/20

  3. to hide this advert.

  4. 2005/05/20
    hbreder

    hbreder Inactive Thread Starter

    Joined:
    2002/01/27
    Messages:
    52
    Likes Received:
    0
    Trojan Horse "arun.exe "

    Thanks for your response. It certainly acted like a malicious intruder. NAV kept popping up with warnings which I was unable to close. The file was in the C root and in every C directory. I was unable to delete, got the message: disc full or access denied .... I finally went into Safe Mode on a search and destroy mission and was able to delete every instance, also the Registry entry. Hope this the end of it!
     
  5. 2005/05/20
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    The reason Norton can't repair it, as the file itself is the entire thing. A Repair would mean a normal file had viral code inserted into it, and Norton would attempt to remove the viral code.
    Why not have Norton quarantine it?
    Or go to RAV Online Scan for a second opinion for free?
     
  6. 2005/05/21
    hbreder

    hbreder Inactive Thread Starter

    Joined:
    2002/01/27
    Messages:
    52
    Likes Received:
    0
    Trojan Horse "arun.exe "

    Sorry, I did not make myself clear. NAV 2005 did not pick it up when I scanned the drive and therefore could not quarantine it. It just kept popping up with the virus alert windows. So I am not sure why it did not pick it up on a scan. My virus definitions were up to date. Anyway, the problem is solved. Thanks.
     
  7. 2005/05/21
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hi hbreder,

    Good idea to have more than one anti-malware app, especially if your only one is the AV: http://www.ewido.net/en/download/

    Webroot Spysweep did not pick it up, nor did NoAdware are not geared up for this sort of thing. Nor I might add is NAV, the only AV that comes fairly close is Kaspersky.

    The free Ewido Anti-Trojan version is an on demand scanner, it and the paid resident version are updated almost on a daily basis.

    Regards - Charles
     
  8. 2005/05/26
    hbreder

    hbreder Inactive Thread Starter

    Joined:
    2002/01/27
    Messages:
    52
    Likes Received:
    0
    Trojan Horse "arun.exe "

    Thanks. I'll give a try. I still have to clean my backup drive which got infected too.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.