Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Randex Virus

Status
Not open for further replies.

quaked2023

Technical User
Joined
Jan 22, 2004
Messages
105
Location
MX
Hello!

I have a problem with a !"#$%!% virus, its randex. I Installed Win 2k sp4, before conecting to the internet i installed all the security updates to protect my pc, i also installed Norton SystemWorks 2004, next i conected to the internet and i ran live update, and as i was updating norton, i get a messege that said that bnnbnbf.exe was detected in my pc and that the acces to the file was denided, then it detected netconfig.exe and deleted, then cajun.exe, deleted also, then ntsys32.exe, also deleted. After i restarted my pc i ran a full system scan and i detected bnnbnbf.exe and put it in quarentine. So i decided to restart my pc and started in safe mode, i found that bnnbnbf.exe wasn't the only suspicious file there was an other file that Norton didn't detect it was nnbbf.exe, i deleted it form the system32 folder and form the registy and restarted again, but now it's back and i keep getting the same messeges that bnnbnbf.exe is still in my pc an that it cannot be deleted because the access to file has been denided and nbbf.exe is runnung and cannot be terminated because the access to the file is denided. any ideas on how can stop this !"#$!"#$ virus

Than you!

PS: Sorry for my bad english

-The Only Privacy Left Is The Inside Of Your Head!- QUAKED2023
 
. Use Google for "Randex virus", as there are some direct automated and manual approaches to this one.

. Then do a carefull step-by-step with faq608-4650
 
Check your Services to make sure it hasn't started a service.

check registry entries at the following locations.

HKLM->Software->Microsoft->Windows->CurrentVersion->Run
HKLM->Software->Microsoft->Windows->CurrentVersion->RunOnce
HKLM->Software->Microsoft->Windows->CurrentVersion
->runServices

sometimes

check HKLM->Software->Microsoft->Windows NT-> CurrentVersion->Windows

and look at the AppInit_DLLs and make sure it doesn't have a value.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top