~.exe in my documents and settings

i have found this file ~.exe 52kb in size, it's contensts look like this but more could be hidden

MZ

i have tried searching google with "~.exe" but nothing

when i tried to delete it remotley from another pc all it's antiviral software kicked off and went nuts but i could not delete...?

i shutdown this computer with this ~.exe file on it and booted it into linux. i also have webmin installed so mounted the windows partition and tried to delete it using the 'file manager' but kept saying this is a read only system (not true)

tried to chmod 777 ~.exe but same message

started samba and accessed the partition that way but still could not delete

so any ideas what it is and how to delete it (esp if a nasty)

Hmmmm,

Quote:

---

when i tried to delete it remotley from another pc all it's antiviral software kicked off and went nuts but i could not delete...?

---

So what did the AV think that it had found?............... it must have given you a message or log entry?

It looks like a font/character recognition issue at first sight. Have you tried to delete it locally in safe mode?

What operating/file system are we talking about here?

Just getting rid of the file isn't the main issue........... you really ought to find out what hit you and what the potential extent of the damage might be............. IMO "band aid" solutions are not an option ;)

get into a command prompt while in your administrator account, just navigate to the directory and type

del c:\INSERT-DIRECTORY-HERE\~.exe

sorry chaps
windows xp home
although i am running avast as antivirus and email checking plus avg for daily scan ( yes i know you should not have 2 anti v's but so far been clean for 4 years but this might be the first!!)

the pc which did not like the ~.exe was also xp(pro) running avast the message was just a warning when i connected to the shared folder and tried to delete it (all on the same network)

nihil: you are right but want to get rid of 'it' if it is a problem, however not very subtle place to put a nasty is it???

www.activescan.com

Post the log here.

Quote:

---

Originally Posted by Cider

www.activescan.com

Post the log here.

---

Not very friendly reviews from what I have seen. You sure? I would try this http://security.symantec.com/sscv6/WelcomePage.asp instead. Don't download it...just do the security check online (ActiveX control and IE necessary, unfortunately) Just my opinion, of course

O

Meh, any online scan would be okay :)

I just work with Active scan on a daily basis so I can troubleshoot :)

Have you done scans with other tools such as spybot or malware bytes? I would be interested to see if there weren't other infections on the system. Cider's suggestion of running an online scan may be useful as well. I have never used active scan, so I cannot comment on it. I have used TrendMicro's housecall, with mixed results. I once ran a scan that took a few hours, only to have it crap out on me right at the end. Frustrating to say the least. I would suggest running Spybot though. If it finds stuff, and cannot remove them, try running it in safemode.

cheers for advice
have got spybot running and not picked anything up
will scan file with avast
and try an online scan too
sorry not got back to you chaps earlier
work getting in the way of life

You might try this:

http://www.brothersoft.com/dellater-download-40658.html

It deletes stuff on reboot so it might work ;)

Give Unlocker a go:

http://ccollomb.free.fr/unlocker/

Quote:

---

It has many other flavors:

Cannot delete file: Access is denied
There has been a sharing violation.
The source or destination file may be in use.
The file is in use by another program or user.
Make sure the disk is not full or write-protected and that the file is not currently in use

---

It will unlock any process that might be accessing or stopping you from deleting the file.

Hey tea

Thanks for the software, really cool :)

Quote:

---

Originally Posted by yellowcat

i shutdown this computer with this ~.exe file on it and booted it into linux. i also have webmin installed so mounted the windows partition and tried to delete it using the 'file manager' but kept saying this is a read only system (not true)

---

It's not an NTFS file system, is it? I don't know of
any Linux versions that will write to NTFS w/o running
something like Captive. You might try Killbox (runs
from Windows). HTH.