FCR7.EXE - can anybody help??



shay
07-09-2005, 11:32 PM
Hi

Got a few replys yesterday offering some good advice about removing this
trojan. Thought all was well untill this morning when I logged on and the
file is still there....any ideas anyone??

Thanks

One of the replys is copied below....

Shay

From: "shay" <shamus_61@hotmail.com>

| Hi
|
| Everytime I log on to this file is created FCRX7.exe - does anybody know
| what it is/what it does? can I delete it?
|
| Thnks
|
| S




Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

1) Download the TrendMicro Sysclean Front End

Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend
Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe


2) Download and install Ad-aware SE
(free personal version v1.05)
http://www.lavasoftusa.com/
Update Ad-aware with the latest definitions and then exit the
software.

3) Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close


Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
when you get to the menu dhoose [1] so you can boot into Safe Mode.

4) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

5) Reboot your PC into Safe Mode and shutdown as many applications as
possible.

6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a full scan of your PC and
delete
all objects found.

7) Restart your PC and perform a "final" Full Scan of your platform
Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a final scan of your PC
and delete
all objects found.


8) If you are using WinME or WinXP,Re-enable System Restore and re-apply
any
System Restore preferences, (e.g. HD space to use suggested 400 ~
600MB),

9) Reboot your PC.

10) If you are using WinME or WinXP, create a new Restore point


* * * Please report back your results * * *



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Jim Macklin
07-09-2005, 11:32 PM
A Google search returned an interesting hit from SmutHut.

Download the anti-virus and spyware programs, install them
and run them in Safe Mode.
SpyBot S&D www.safer-networking.net
Ad-Aware SE Personal www.lavasoftusa.com
AVAST anti-virus www.avast.com
Microsoft Anti-Spyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx


--
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.


"shay" <shamus_61@hotmail.com> wrote in message
news:eN2IqjrWFHA.2984@tk2msftngp13.phx.gbl...
| Hi
|
| Got a few replys yesterday offering some good advice about
removing this
| trojan. Thought all was well untill this morning when I
logged on and the
| file is still there....any ideas anyone??
|
| Thanks
|
| One of the replys is copied below....
|
| Shay
|
| From: "shay" <shamus_61@hotmail.com>
|
|| Hi
||
|| Everytime I log on to this file is created FCRX7.exe -
does anybody know
|| what it is/what it does? can I delete it?
||
|| Thnks
||
|| S
|
|
|
|
| Dump the contents of the IE Temporary Internet Folder
cache (TIF)
| Start --> Settings --> Control Panel --> Internet
Options --> Delete Files
|
| Dump the contents of the Mozilla FireFox Cache { if you
use FireFox }
| Tools --> Options --> Privacy --> Cache --> Clear
|
| 1) Download the TrendMicro Sysclean Front End
|
| Download the utility SYSCLEAN_FE at the following URL --
| http://www.ik-cs.com/got-a-virus.htm
| SYSCLEAN_FE automates the download and execution process
of the Trend
| Sysclean Package.
| Direct URL --
| http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe
|
|
| 2) Download and install Ad-aware SE
| (free personal version v1.05)
| http://www.lavasoftusa.com/
| Update Ad-aware with the latest definitions and
then exit the
| software.
|
| 3) Execute; SYSCLEAN_FE.EXE
| Choose; Unzip
| Choose; Close
|
|
| Execute; c:\sysclean\SYSCLEAN_FE.BAT
| { or Double-click on 'SYSCLEAN_FE Link' in
c:\sysclean }
| when you get to the menu dhoose [1] so you can boot
into Safe Mode.
|
| 4) If you are using WinME or WinXP, disable System
Restore
|
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
|
| 5) Reboot your PC into Safe Mode and shutdown as many
applications as
| possible.
|
| 6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
| { or Double-click on 'SYSCLEAN_FE Link' in
c:\sysclean }
| Choose [2] on the menu and let SYCLEAN.COM scan your
computer.
| when done, execute Ad-aware SE and perform a full
scan of your PC and
| delete
| all objects found.
|
| 7) Restart your PC and perform a "final" Full Scan of
your platform
| Execute; c:\sysclean\SYSCLEAN_FE.BAT
| { or Double-click on 'SYSCLEAN_FE Link' in
c:\sysclean }
| Choose [2] on the menu and let SYCLEAN.COM scan your
computer.
| when done, execute Ad-aware SE and perform a final
scan of your PC
| and delete
| all objects found.
|
|
| 8) If you are using WinME or WinXP,Re-enable System
Restore and re-apply
| any
| System Restore preferences, (e.g. HD space to use
suggested 400 ~
| 600MB),
|
| 9) Reboot your PC.
|
| 10) If you are using WinME or WinXP, create a new
Restore point
|
|
| * * * Please report back your results * * *
|
|
|
| --
| Dave
| http://www.claymania.com/removal-trojan-adware.html
| http://www.ik-cs.com/got-a-virus.htm
|
|
|

S.Sengupta
07-09-2005, 11:32 PM
Are you using the latest versions of malware removing tools?And are you
running them in Safe mode?

regards,
ssg MS-MVP

shay wrote:

> Hi
>
> Got a few replys yesterday offering some good advice about removing this
> trojan. Thought all was well untill this morning when I logged on and the
> file is still there....any ideas anyone??
>
> Thanks
>
> One of the replys is copied below....
>
> Shay
>
> From: "shay" <shamus_61@hotmail.com>
>
> | Hi
> |
> | Everytime I log on to this file is created FCRX7.exe - does anybody know
> | what it is/what it does? can I delete it?
> |
> | Thnks
> |
> | S
>
>
>
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
> 1) Download the TrendMicro Sysclean Front End
>
> Download the utility SYSCLEAN_FE at the following URL --
> http://www.ik-cs.com/got-a-virus.htm
> SYSCLEAN_FE automates the download and execution process of the Trend
> Sysclean Package.
> Direct URL --
> http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe
>
>
> 2) Download and install Ad-aware SE
> (free personal version v1.05)
> http://www.lavasoftusa.com/
> Update Ad-aware with the latest definitions and then exit the
> software.
>
> 3) Execute; SYSCLEAN_FE.EXE
> Choose; Unzip
> Choose; Close
>
>
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> when you get to the menu dhoose [1] so you can boot into Safe Mode.
>
> 4) If you are using WinME or WinXP, disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
>
> 5) Reboot your PC into Safe Mode and shutdown as many applications as
> possible.
>
> 6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a full scan of your PC and
> delete
> all objects found.
>
> 7) Restart your PC and perform a "final" Full Scan of your platform
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a final scan of your PC
> and delete
> all objects found.
>
>
> 8) If you are using WinME or WinXP,Re-enable System Restore and re-apply
> any
> System Restore preferences, (e.g. HD space to use suggested 400 ~
> 600MB),
>
> 9) Reboot your PC.
>
> 10) If you are using WinME or WinXP, create a new Restore point
>
>
> * * * Please report back your results * * *
>
>
>

beamish
07-09-2005, 11:32 PM
"shay" wrote:

> Hi
>
> Got a few replys yesterday offering some good advice about removing this
> trojan. Thought all was well untill this morning when I logged on and the
> file is still there....any ideas anyone??
>
> Thanks
>
> One of the replys is copied below....
>
> Shay
>
> From: "shay" <shamus_61@hotmail.com>
>
> | Hi
> |
> | Everytime I log on to this file is created FCRX7.exe - does anybody know
> | what it is/what it does? can I delete it?
> |
> | Thnks
> |
> | S
>
>
>
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
> 1) Download the TrendMicro Sysclean Front End
>
> Download the utility SYSCLEAN_FE at the following URL --
> http://www.ik-cs.com/got-a-virus.htm
> SYSCLEAN_FE automates the download and execution process of the Trend
> Sysclean Package.
> Direct URL --
> http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe
>
>
> 2) Download and install Ad-aware SE
> (free personal version v1.05)
> http://www.lavasoftusa.com/
> Update Ad-aware with the latest definitions and then exit the
> software.
>
> 3) Execute; SYSCLEAN_FE.EXE
> Choose; Unzip
> Choose; Close
>
>
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> when you get to the menu dhoose [1] so you can boot into Safe Mode.
>
> 4) If you are using WinME or WinXP, disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
>
> 5) Reboot your PC into Safe Mode and shutdown as many applications as
> possible.
>
> 6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a full scan of your PC and
> delete
> all objects found.
>
> 7) Restart your PC and perform a "final" Full Scan of your platform
> Execute; c:\sysclean\SYSCLEAN_FE.BAT
> { or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
> Choose [2] on the menu and let SYCLEAN.COM scan your computer.
> when done, execute Ad-aware SE and perform a final scan of your PC
> and delete
> all objects found.
>
>
> 8) If you are using WinME or WinXP,Re-enable System Restore and re-apply
> any
> System Restore preferences, (e.g. HD space to use suggested 400 ~
> 600MB),
>
> 9) Reboot your PC.
>
> 10) If you are using WinME or WinXP, create a new Restore point
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
Hello, If problem persist try a visit to the following sites.
http://www.geekstogo.com
http://www.spywareinfo.com
Take Care.
beamish.


FCR7.EXE - can anybody help??