Help to remove suspicious file
Results 1 to 9 of 9

Thread: Help to remove suspicious file

  1. #1
    Join Date
    Mar 2001
    Location
    Cheshire, UK
    Posts
    915

    Help to remove suspicious file

    Hello All, i downloaded my email through Outlook today, and one of the emails contained a file, which, i did not open, but transferred the file to my documents, scanned it, no viruses.

    It has installed a program called "wingo.exe" in C:\WINDOWS\SYSTEM

    When i try to delete it, it says it cannot due to Windows using it.

    How can i get rid of this program?

    Also, it tries to connect to the internet, but, i have blocked it from doing this through Zonealarm.

    Thanks, GEP

  2. #2
    Join Date
    Feb 2000
    Location
    26.03°N 80.14°W
    Posts
    9,410
    Reboot in Safe Mode, then delete the file?
    Vernon Frazee, Microsoft MVP (Windows - Shell/User)

    Defenses Up!
    Tip: When prompted for a password, give an incorrect one first. A phishing site will accept it; a legitimate one won't.


    Inside Spyware: A Guide to Finding, Removing and Preventing Online Pests


    If you don't keep up with security fixes, your computer|network won't be yours for long.

  3. #3
    Join Date
    Mar 2001
    Location
    Cheshire, UK
    Posts
    915

    Re:Reboot in Safe Mode

    Hello Vernon and all, thanks for your reply.

    I cannot reboot in Safe Mode, always stalls on the Black screen egg-timer.

    I have been told a different way a few years ago, but cannot remember.

    Any ideas?

    Thanks GEP

  4. #4
    Join Date
    Mar 2001
    Location
    Cheshire, UK
    Posts
    915

    Re:Suspicious File

    Hello All, i did a Norton AV scan, it found 278 viruses, quarantined them all, and deleted them. All seems ok now.
    Only ever had 5 or 6 virus since 1999, in shock to be infected by so many.

    Still cannot delete that "Wingo.exe" file. It came up in the Norton Scan as a virus.

    Cannot get my windows 98se into Safe mode, any ideas how to get that Wingo program deleted from System??

    Thanks, GEP

  5. #5
    Join Date
    Mar 2001
    Location
    Cheshire, UK
    Posts
    915

    I have a virus or viruses that cannot be deleted

    Hello All, i did a Norton AV scan, it found 278 viruses, quarantined them all, and deleted them.

    Everything seemed ok, did another scan, found the same ones, deleted them from Quarantine again.

    It said, that it could be one of a couple of viruses and to place a floppy recovery disc in or something like that, and reboot to repair or delete this virus.

    The virus is this "wingo.exe" program that is in my system, still cannot delete it.

    I have 7 recue floppies is this what the message after i did the scan means?

    Thanks, GEP

  6. #6
    Join Date
    Jul 1998
    Location
    Toronto
    Posts
    25,428
    Have a look in the registry key.. (start, run, type "regedit")

    HKEY_Current_User\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    and delete the reference, in the right hand side, to the wingo.exe program. reboot and then you can delete the wingo file itself.

    VirtualDr email notices are not working.
    Check back regularly for responses.

    _____________________
    cat lovers click here

  7. #7
    HAN's Avatar
    HAN is offline Virtual PC Specialist!!!
    Join Date
    Feb 2002
    Location
    USA
    Posts
    4,319
    gep: Wingo.exe is from one of the new Bagle/Beagle viruses. Here is a link to Symantec's page on Beagle.AV.

  8. #8
    Join Date
    Mar 2001
    Location
    Cheshire, UK
    Posts
    915

    Sorted

    Hello Han and all, thanks, it was the Beagle virus, went to Norton website and downloaded the fix, removed it from my computer, all's well now.

    Won't listen to my missus re:downloading attachments, its ok, a friends sent it, lol.

    Thanks, GEP

  9. #9
    HAN's Avatar
    HAN is offline Virtual PC Specialist!!!
    Join Date
    Feb 2002
    Location
    USA
    Posts
    4,319
    gep: Glad you got things fixed!

    It's tough anymore to know what's safe. Nearly all of recent viruses spoof (fake) the sender's email address. So while it looks like the email is from a friend, one really has no idea where is came from. Best thing to do is to run a good AV, keep it updated and individually scan every attachment before opening it.

    The Beagle/Bagel you received is really spreading. We have received and captured several over the last couple of days at our small office...

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •