ATIPHEXX.EXE AND SMSC.EXE WORMS.....HELP!!!!

[brandon]

I just installed xp... I ran all windows updates, I downloaded Trend Micro Virus Scan program for a free trial, scanned my computer and it came up with these two worms. Trend Micro will not let me clean these files or quarantinne them. It says I must change user name or file path?? not sure what or how to do that. My question is , can I just go to Win32 and delete these 2 files or will that cause something to not run correctly. (I'm always weary of deleting things when i dont know what they are).I know how to delete them from registry but I want them completely gone... any tips on a program or software I can run that will delete these and NOT tell me 80 other steps I have to go through..perferably freeware since i'm a little strapped for cash right now. thanks alot.

[Kent]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/tongue.gif\' class=\'bbc_emoticon\' alt=\'\' />

Steps

1. End smsc.exe in your processes (DO this first because this worm will prevent you from using regedit.exe and msconfig.exe)

2. Delete smsc*.* from c:\windows\prefech

3. Delete smsc.exe from c:\windows\system32

4. Delete c:\windows\driver cache\i386\Drivers.cab (this file has been infected)

5. Use msconfig.exe to uncheck smsc.exe from startup.

This should do it.

[Guest]

Thanks for the steps to get rid of that worm.  My best friend was having this problem and I was able to use google and found your steps which I sounded intelligent, by telling her exactly what to do to rid it!!!!  LOL

[Kate]

Any hints to get rid of the atiphexx.exe too?   http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/dry.gif\' class=\'bbc_emoticon\' alt=\'<_<\' />

[BlackJack]

[quote name=\'Kate\' date=\'Jul 4 2004, 05:41 AM\']Any hints to get rid of the atiphexx.exe too?   http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/dry.gif\' class=\'bbc_emoticon\' alt=\'<_<\' />[/quote]
 I just removed the file, no problems afterward whatsoever.
What I usually do in cases like this; 1) copy the file, zip it, and save it to a disk. 2) reboot in safe or dos mode and remove the original. 3) reboot and see if everything still works, if it doesn't I put the file back

Hope this helps

[Guest]

Help.   I'm having the same problem.   I did the steps to remove smsc.exe that were typed here, but it keeps coming back.   I deleted all the files and turned it off in the startup, but everytime I put Windows back to normal mode, it is back in the startup.  What am I missing?

[MaGLLa]

I think U should first turn off system restore http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/ph34r.gif\' class=\'bbc_emoticon\' alt=\':ph34r:\' />

[huang]

[quote name=\'Kent\' date=\'Jun 25 2004, 10:19 AM\']http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/tongue.gif\' class=\'bbc_emoticon\' alt=\'\' />

Steps

1. End smsc.exe in your processes (DO this first because this worm will prevent you from using regedit.exe and msconfig.exe)

2. Delete smsc*.* from c:\windows\prefech

3. Delete smsc.exe from c:\windows\system32

4. Delete c:\windows\driver cache\i386\Drivers.cab (this file has been infected)

5. Use msconfig.exe to uncheck smsc.exe from startup.

This should do it.[/quote]
 Hi...
not able to delete the b/m file
C:\I138\driver.cab and
C:\windows\driver cache\i386\Drivers.cab

pls help!!

[JC-DOS]

..:: For Atiphexx.exe ::..
-------------------------------

1.) Search atiphexx.exe in driver C: (possible located on c:\windows\atiphexx.exe)
2.) Dont attempt automatically delete this exe file, just open it in notepad.exe .
3.) After successfully open it, just type any letters/character and then save it.
4.) Thats it.

For more information, email me (a)  "jcd0sEmail Removed"....

[Guest]

what if search can't find atiphexx.exe ?

[Guest]

Hey,  I'm trying to fix my uncles computer because its been really slow.  I keep getting the error measage that smsc.exe has to be shut down because of an error when I start up.  So I'm going through these steps here.  Do I really need to delete the Driver.cab file?  Its a huge file (74 mb) and that seems like its way too important to delete.  Was everyone elses driver file that large?

[Suzanne]

I had the SMSC worm problem - I followed the instructions and it appears to be gone but I still can't run my virus software the last step of msconfig - any suggestions?

[Guest]

I believe you have to remove all the entries in the registry as well. I did all that steps. Then I went into registry and found a whole lot of entries running this file.

[brodie pearce]

all of the suggestions provided for the atiphexx.exe worm are useless as it is in the registry so can not be found in search and even if you delete it from the registry it just respawns and once your connected to the internet you cant end it in the task manager, in fact, its eating up my bandwidth right now.

note. atiphexx.exe is in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

it is represented as ATI Control Panel or similar and its value is atiphexx.exe

someone please HELP!!!

[NightSquirrel]

[quote name=\'Guest\' date=\'Aug 4 2004, 12:48 PM\']Do I really need to delete the Driver.cab file?  Its a huge file (74 mb) and that seems like its way too important to delete.  Was everyone elses driver file that large?[/quote]
 My Driver.cab file was just as big as yours, and I'm reluctant to delete it as well... A little help here would be appreciated  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />

[Louise]

[quote name=\'Suzanne\' date=\'Aug 8 2004, 07:58 AM\']I had the SMSC worm problem - I followed the instructions and it appears to be gone but I still can't run my virus software the last step of msconfig - any suggestions?[/quote]
 I had the SMSC.exe worm. I have removed it I think but can't install Virus Scan software.

Any Ideas?

[brodie pearce]

the atiphexx.exe registry entries are also in HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

i have also later found that even if you delete these entries they still manage to come back, i deleted all of these three entries about a month ago and had no sight of it in my running processes or registry but it reappeared last night.

my advise, burn off anything youi need to keep or save it in DOS files and wipe the rest and start anew

[AsRock+SD]

Hello,

I found  ATI Omega Drivers install this  ( V 4.12  atiphexx.exe ).  And was able to remove it with Xoftspy with No problems at all.

AsRock+SD

Specialdetachment.org

[Guest]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/sad.gif\' class=\'bbc_emoticon\' alt=\'\' />  i cant find smsc.exe in prefetch n cant fing diretor.cad
please help http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/unsure.gif\' class=\'bbc_emoticon\' alt=\':unsure:\' />