FCRX7.exe - anybody know what this is??



shay
07-10-2005, 12:30 AM
Hi

Everytime I log on to this file is created FCRX7.exe - does anybody know
what it is/what it does? can I delete it?

Thnks

S

NoNoBadDog!
07-10-2005, 12:30 AM
It is almost certainly a virus or malware. A search on Google turned up no
hits. Do you have an antivirus app running, and if so does it have the
latest definitions? Have you scanned your computer for spyware, trojans and
adware?

If you delete the file and it comes back on the next boot, then there is no
point is deleting it. You must find what app is generating the file and get
rid of the source.

Bobby


"shay" <shamus_61@hotmail.com> wrote in message
news:uB%23nWYgWFHA.3076@TK2MSFTNGP12.phx.gbl...
> Hi
>
> Everytime I log on to this file is created FCRX7.exe - does anybody know
> what it is/what it does? can I delete it?
>
> Thnks
>
> S
>

shay
07-10-2005, 12:30 AM
already done a scan using etrust antivirus - according to that all is well.
have already deleted it and yes it comes back....will try and find the
source.....thks
"NoNoBadDog!" <mypants_bjsledgeATpixi.com> wrote in message
news:%23gQhjbgWFHA.2700@TK2MSFTNGP12.phx.gbl...
> It is almost certainly a virus or malware. A search on Google turned up
> no hits. Do you have an antivirus app running, and if so does it have the
> latest definitions? Have you scanned your computer for spyware, trojans
> and adware?
>
> If you delete the file and it comes back on the next boot, then there is
> no point is deleting it. You must find what app is generating the file
> and get rid of the source.
>
> Bobby
>
>
> "shay" <shamus_61@hotmail.com> wrote in message
> news:uB%23nWYgWFHA.3076@TK2MSFTNGP12.phx.gbl...
>> Hi
>>
>> Everytime I log on to this file is created FCRX7.exe - does anybody know
>> what it is/what it does? can I delete it?
>>
>> Thnks
>>
>> S
>>
>
>

Rick \Nutcase\ Rogers
07-10-2005, 12:30 AM
Hi shay,

> Hi
>
> Everytime I log on to this file is created FCRX7.exe - does anybody know
> what it is/what it does? can I delete it?
>
> Thnks
>
> S

It's a virus. Restart in Safe mode, follow the trojan removal procedure
here: http://rickrogers.org/fixes.htm#trojan

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

shay
07-10-2005, 12:30 AM
Hi Rick

Excellent - thanks very much for your help

Shay
"Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
news:OG%23nNrgWFHA.2740@TK2MSFTNGP14.phx.gbl...
> Hi shay,
>
>> Hi
>>
>> Everytime I log on to this file is created FCRX7.exe - does anybody know
>> what it is/what it does? can I delete it?
>>
>> Thnks
>>
>> S
>
> It's a virus. Restart in Safe mode, follow the trojan removal procedure
> here: http://rickrogers.org/fixes.htm#trojan
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Associate Expert - WindowsXP Expert Zone
> www.microsoft.com/windowsxp/expertzone
> Windows help - www.rickrogers.org

David H. Lipman
07-10-2005, 12:30 AM
From: "shay" <shamus_61@hotmail.com>

| Hi
|
| Everytime I log on to this file is created FCRX7.exe - does anybody know
| what it is/what it does? can I delete it?
|
| Thnks
|
| S




Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

1) Download the TrendMicro Sysclean Front End

Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe


2) Download and install Ad-aware SE
(free personal version v1.05)
http://www.lavasoftusa.com/
Update Ad-aware with the latest definitions and then exit the software.

3) Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close


Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
when you get to the menu dhoose [1] so you can boot into Safe Mode.

4) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

5) Reboot your PC into Safe Mode and shutdown as many applications as possible.

6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a full scan of your PC and delete
all objects found.

7) Restart your PC and perform a "final" Full Scan of your platform
Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a final scan of your PC and delete
all objects found.


8) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),

9) Reboot your PC.

10) If you are using WinME or WinXP, create a new Restore point


* * * Please report back your results * * *



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

shay
07-10-2005, 12:30 AM
David

Many thanks - that really was some sound advice! All went well and the file
is now gone.

Thanks again

Shamus


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eIMGCUhWFHA.2960@TK2MSFTNGP15.phx.gbl...
> From: "shay" <shamus_61@hotmail.com>
>
> | Hi
> |
> | Everytime I log on to this file is created FCRX7.exe - does anybody know
> | what it is/what it does? can I delete it?
> |
> | Thnks
> |
> | S
>
>
>
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
> 1) Download the TrendMicro Sysclean Front End
>
> Download the utility SYSCLEAN_FE at the following URL --
> http://www.ik-cs.com/got-a-virus.htm
> SYSCLEAN_FE automates the download and execution process of the Trend
> Sysclean Package.
> Direct URL --
> http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe
>
>
> 2) Download and install Ad-aware SE
> (free personal version v1.05)
> http://www.lavasoftusa.com/
> Update Ad-aware with the latest definitions and then exit the
> software.
>
> 3) Execute; SYSCLEAN_FE.EXE
> Choose; Unzip
> Choose; Close
>
>
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> when you get to the menu dhoose [1] so you can boot into Safe Mode.
>
> 4) If you are using WinME or WinXP, disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
>
> 5) Reboot your PC into Safe Mode and shutdown as many applications as
> possible.
>
> 6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a full scan of your PC
> and delete
> all objects found.
>
> 7) Restart your PC and perform a "final" Full Scan of your platform
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a final scan of your PC
> and delete
> all objects found.
>
>
> 8) If you are using WinME or WinXP,Re-enable System Restore and
> re-apply any
> System Restore preferences, (e.g. HD space to use suggested 400 ~
> 600MB),
>
> 9) Reboot your PC.
>
> 10) If you are using WinME or WinXP, create a new Restore point
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

David H. Lipman
07-10-2005, 12:30 AM
From: "shay" <shamus_61@hotmail.com>

| David
|
| Many thanks - that really was some sound advice! All went well and the file
| is now gone.
|
| Thanks again
|
| Shamus
|

You are welcome Shamus !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

shay
07-10-2005, 12:32 AM
Ah!!

Logged on this morning and this damn file is back!!

Any ideas anyone please!?!?!?
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eIMGCUhWFHA.2960@TK2MSFTNGP15.phx.gbl...
> From: "shay" <shamus_61@hotmail.com>
>
> | Hi
> |
> | Everytime I log on to this file is created FCRX7.exe - does anybody know
> | what it is/what it does? can I delete it?
> |
> | Thnks
> |
> | S
>
>
>
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
> 1) Download the TrendMicro Sysclean Front End
>
> Download the utility SYSCLEAN_FE at the following URL --
> http://www.ik-cs.com/got-a-virus.htm
> SYSCLEAN_FE automates the download and execution process of the Trend
> Sysclean Package.
> Direct URL --
> http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe
>
>
> 2) Download and install Ad-aware SE
> (free personal version v1.05)
> http://www.lavasoftusa.com/
> Update Ad-aware with the latest definitions and then exit the
> software.
>
> 3) Execute; SYSCLEAN_FE.EXE
> Choose; Unzip
> Choose; Close
>
>
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> when you get to the menu dhoose [1] so you can boot into Safe Mode.
>
> 4) If you are using WinME or WinXP, disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
>
> 5) Reboot your PC into Safe Mode and shutdown as many applications as
> possible.
>
> 6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a full scan of your PC
> and delete
> all objects found.
>
> 7) Restart your PC and perform a "final" Full Scan of your platform
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a final scan of your PC
> and delete
> all objects found.
>
>
> 8) If you are using WinME or WinXP,Re-enable System Restore and
> re-apply any
> System Restore preferences, (e.g. HD space to use suggested 400 ~
> 600MB),
>
> 9) Reboot your PC.
>
> 10) If you are using WinME or WinXP, create a new Restore point
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

David H. Lipman
07-10-2005, 12:32 AM
From: "shay" <shamus_61@hotmail.com>

| Ah!!
|
| Logged on this morning and this damn file is back!!
|
| Any ideas anyone please!?!?!?


Please submit the "FCRX7.exe" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against several different AV vendor's scanners.

Another way to submit is to send the suspect file to the following email address
scan<at>virustotal.com
{ replace <at> with @ } with only the word SCAN as the subject.

Please post back the EXACT results.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


FCRX7.exe - anybody know what this is??