Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

And unknown program executes when boot pc

by spy HH Jul 10, 2007 3:35AM PDT

Hi, I own a hp pavilion dv1000 WINXP home edition. For the past few days, when windows start, there's a whole lot of windows that appear, but they are like ms-dos or something like that. And on the top of the window it says the path. The path is: C://documents and settings/owner/local setting/temp/Cn923.exe and the others, appear with the same path, just that the last name ->Cn923< changes the las two digits, they go from Cn911.exe to Cn923.exe and after they all appear, there's a little message box that says there's an illegal function or something like that and it appears two options: Close & IGnore. That message box appears several times. I choose close until they are all gone. Later on, i verified the path and saw the programs there in the temp folder and i deleted them with shift+del and the next day when windows loaded again, they re-appeared and i searched back in the temp folder and there they were. Now i wonder, is this some virus that i have on my pc? I already ran the norton full scan and nothing appears. How do i get rid of those annoying things that keep comming each time i turn on the pc?

Any ideas?

Discussion is locked

8 Posts
- Collapse + Expand Details
- Collapse -
It does sound like probable "spyware" so ...
by Edward ODaniel Jul 10, 2007 3:43AM PDT
- Collapse -
Your computer is infected
by PudgyOne Jul 10, 2007 3:58AM PDT
- Collapse -
Thanks
by spy HH Jul 10, 2007 6:15AM PDT

Well, that explains it, but do you know a way of getting rid of it?

- Collapse -
Marianna's post says
by PudgyOne Jul 10, 2007 7:27AM PDT
- Collapse -
You seem to have the SillyFDC worm
by El Alquimista Jul 10, 2007 7:53AM PDT

These cn9xx files -- at least up through 16 -- are some of the SillyFDC worm files. This worm in various versions, but not it's files, has been been listed in the Virus and Security Alert Forum, the latest on 6/27/07. An antimalware program that should remove this worm is listed there.

A do-it-yourself removal of a version of SillyFDC is given on this site. Your version of the worm is slightly different because it creates some additional cn9xx files, but you may get some ideas.

Hope this helps a little

Frank

- Collapse -
Thanks,
by spy HH Jul 17, 2007 3:51AM PDT

The description you gave matches to my situation, now, please can someone help me on removing it? And i mean, not actually posting links to programs that don't work if you don't pay, or links describing the virus... Please, effective ways to end it! And how to remove it from a possibly infected usb memory. Thanks

- Collapse -
How to
by Amos16 Jul 17, 2007 6:36PM PDT

Hi - you can use any good spyware removal program (such as AVG free) BUT in order for the malware not to reappear you have to remove it from the automatic back-up as well. Go to System Restore (right click on My Computer/Properties) and disable System Restore on all partitions. Then run the anti-virus program. And do not forget to enable the System Restore operation again after you have done so. By the way, if the removal does not work on the ordinary configuration, go to safe mode and try it there. Hope this helps - Amos

- Collapse -
(NT) Thank you so much, it worked perfectly
by spy HH Jul 20, 2007 12:37AM PDT
Back to Computer Help forum

CNET Forums

Operating Systems
Software
Electronics & Gadgets
Hardware
Tablets & Mobile Devices
General Help
Brand Forums
Roadshow Autos
Off Topic

Other Forums

Forum Info