Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Hekp with clcr.exe
vanity | 12/19/2008 | vanity

Posted on 12/19/2008 11:58:56 AM PST by prisoner6

Can someone help me with the clcr.exe virus? I usually don't have problems like this but this is on my oldest son's computer as well as some of the ones I use at work.

It won't allow hijackthis to run or trend micro. We can't download anti virus spyware. If we try to look up via CERT we get redirects.

ANY help or info is GREATLY apriciated.

THANKS!

prisoner6


TOPICS: Chit/Chat; Computers/Internet
KEYWORDS: computer; virus
I usually don't have problems like this but this one has me stumped. Hopefully I don't have to reformat the HD.

prisoner6

1 posted on 12/19/2008 11:58:57 AM PST by prisoner6
[ Post Reply | Private Reply | View Replies]

To: prisoner6

http://answers.yahoo.com/question/index?qid=20070325044238AA6CYDF


2 posted on 12/19/2008 12:02:56 PM PST by Cementjungle
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6

http://www.bleepingcomputer.com/forums/index.php?showtopic=136075&hl=clcr.exe


3 posted on 12/19/2008 12:06:31 PM PST by Walmartian
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6

I’m afraid you are hosed. By the time the system is contaminated it most likely has buried itself deep into your system, making it impossible to remove. Reformat. Reinstall everything. Sorry.


4 posted on 12/19/2008 12:07:20 PM PST by LiberConservative (That temperatures are actually falling now illustrates how fast the world is warming.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6
It won't allow hijackthis to run or trend micro. We can't download anti virus spyware. If we try to look up via CERT we get redirects.

You throw out the most complex, inside baseball, highly technical statement I've ever heard, and yet you need to ask others something about computers?

There must be a WHOLE lot more to computers than I ever thought...

Owl_Eagle

“When the stock market crashed,
Franklin Roosevelt got on the television
and didn’t just talk about
the princes of greed, he said,
‘Look, here’s what happened.’"
-Slow Joe Biden

5 posted on 12/19/2008 12:07:22 PM PST by South Hawthorne (In Memory of my Dear Friend Henry Lee II)
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6

http://forums.spybot.info/archive/index.php/t-14796.html


6 posted on 12/19/2008 12:07:58 PM PST by traderrob6
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6
What's your operating system?

And, can you get taskmgr.exe to run, in order to kill the process?

7 posted on 12/19/2008 12:08:01 PM PST by an amused spectator (I am Joe, too - I'm talkin' to you, VBM: The Volkischer Beobachter Media)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Owl_Eagle

Those are typical places to look for virus help.


8 posted on 12/19/2008 12:08:50 PM PST by AppyPappy (If you aren't part of the solution, there is good money to be made prolonging the problem.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: prisoner6

Boot into Safe Mode and go to Norton’s site. I think it has a web-based anti-virus scanner


9 posted on 12/19/2008 12:09:20 PM PST by AppyPappy (If you aren't part of the solution, there is good money to be made prolonging the problem.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6
I would use Malware bytes. This program fixed my system from a couple other serious virus attacks. Make sure and click "update" befo0re you run it the first time.
10 posted on 12/19/2008 12:09:23 PM PST by mysterio
[ Post Reply | Private Reply | To 1 | View Replies]

To: LiberConservative

“I’m afraid you are hosed. By the time the system is contaminated it most likely has buried itself deep into your system, making it impossible to remove. Reformat. Reinstall everything. Sorry.”

Bull.


11 posted on 12/19/2008 12:09:40 PM PST by traderrob6
[ Post Reply | Private Reply | To 4 | View Replies]

To: LiberConservative
Nah, you can still fix most of the pretty bad viruses. It's a matter of having the right cleaner and running in safe mode.

If the virus redirects your browser links, surf the net through a proxy server just like you would use to get around an internet block at work.

I had to do this two months ago during a viral attack of my system.
12 posted on 12/19/2008 12:11:01 PM PST by mysterio
[ Post Reply | Private Reply | To 4 | View Replies]

To: prisoner6
f8 at boot up to safe mode

go to control panel , users , create a new user with administrator rights

reboot under the Additional new created administrator account

if you are sure of the name of the file and you cant delete it use unlocker avail at major-geeks

if your not sure run avast boot up scan or bitdefender scan
or a-squared scan or avg..

always be prepared to reformat /reinstall ,etc.. and take all advise (mine) as a suggestion, I would Not want to contribute to the trashing of your system, so obtain many suggestions and roll the dice...

13 posted on 12/19/2008 12:29:45 PM PST by Eagle50AE (Pray for our Armed Forces.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mysterio
If the virus redirects your browser links, surf the net through a proxy server just like you would use to get around an internet block at work.

How does one do that?

14 posted on 12/19/2008 12:30:00 PM PST by IYAS9YAS (Hey Obama, why lawyer up when you can pony up? Show us your vault copy BC)
[ Post Reply | Private Reply | To 12 | View Replies]

To: prisoner6

Sometimes the best way to get rid of a problem like that is to boot the computer off a cd. That way the virus isn’t running and you can just delete the files.

You can use a Windows XP install disk to do this if you go to the repair console. Or there’s BartPE, which you can use to create a live Windows CD. Or I use Puppy Linux, a nice small linux distro that boots off a cd or flash drive.

Good luck! Virus authors are evil.


15 posted on 12/19/2008 12:31:59 PM PST by NRPM
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

I removed this from a friends computer using ComboFix. Read all at the link and be sure you understand ComboFix isn't for beginners. Good luck.

16 posted on 12/19/2008 12:35:42 PM PST by ScreamingFist (Annihilation - The result of underestimating your enemies. NRA)
[ Post Reply | Private Reply | To 1 | View Replies]

To: traderrob6

Its been my exp. that some of these viruses attach themselves
to windows systems procs and cant be deleted by standard
anti-virus programs , unless the anti-virus program has a reboot sequence and deals with it before windows fully loads.
If you’ve got inadequate anti-virus protection, whereas it recognizes the virus and deletes associated files while Windows is fully on,
then the virus reacts and creates new files with new names,
with every reboot. By the time you get a top-notch anti-virus
program installed, the virus may have done so many new file
iterations that the new and good Anti-virus program just isnt programmed to follow that deep into the file iterations. The good anti-virus program may only be programmed with the assumption that you are only dealing with relatively newly acquired virus’s, not ones that have been dealt with inadequately by an inadequate anti-virus program, have ‘burrowed’ repeatedly with new file names, etc.
Been there done that.
For instance MalwareBytes Anti-virus program would
be an inadequate anti-virus program for such a ‘burrowing’
virus that attaches to windows procs.
Try Kaspersky Anti-Virus/ Internet Suite.

As to the call of ‘Bull’.
Restrain yourself matador.


17 posted on 12/19/2008 12:45:14 PM PST by Beeline
[ Post Reply | Private Reply | To 11 | View Replies]

To: prisoner6
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

this is a direct download link to a very good freeware anti malware program, When you install make sure to update the definitions(you can also update from the scan page, some times the update link on the mail page does not work)

http://security.symantec.com/sscv6/Setup.exe direct link to symantec’s antivirus scanner this is a program that scans but does not correct infections.

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html link to download hijack this. an excellent program for finding and getting various forums to help you kill infections.

18 posted on 12/19/2008 12:45:28 PM PST by waynesa98
[ Post Reply | Private Reply | To 1 | View Replies]

To: IYAS9YAS
You have to be careful with free proxy servers, but last I checked, freeproxyserver.net was still on the up and up. You just type the URL you want and you view the site through a window. I would be careful about logging in to an email or account somewhere, though, because some of the proxy servers record login info and use your account to spam. I had that happen at a different site with my myspace. But like I said, I think the link I gave you is still pretty legit, and it works well for viewing sites that are blocked.
19 posted on 12/19/2008 12:59:15 PM PST by mysterio
[ Post Reply | Private Reply | To 14 | View Replies]

To: Beeline

Perhaps you should take your own advice.


20 posted on 12/19/2008 1:04:39 PM PST by traderrob6
[ Post Reply | Private Reply | To 17 | View Replies]

To: prisoner6
You could always go into DOS mode and use 'fdisk' to "fix your disk".

ONLY kidding, do NOT do that!

You are not hosed, not at all, read up on what has infected your system from Symantec:

http://www.symantec.com/security_response/writeup.jsp?docid=2004-112111-3912-99&tabid=2

21 posted on 12/19/2008 1:09:38 PM PST by mkjessup
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6
Can someone help me with the clcr.exe virus?

I can't help you with the virus but I can help you with your spelling.

Hekp = Help :)

I hope that hekps.....

22 posted on 12/19/2008 1:16:26 PM PST by Hot Tabasco (What size shot works best on 4 calling birds?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mysterio
You have to be careful with free proxy servers

Have you heard of cspeed.net and if so, is it a "safe" one to use?
23 posted on 12/19/2008 2:02:27 PM PST by copaliscrossing (Progressives are Socialists)
[ Post Reply | Private Reply | To 19 | View Replies]

To: prisoner6

I had a similar problem recently and the virus I had wouldn’t allow Spybot Search & Destroy to run. Apparently the virus/spyware “keyed” on the executable name for Spybot so I just renamed it to abc.exe and then it started right up. That may be what you need to do with your Anti-spyware program.

The MalwareBytes Anti-Malware program is a very good one and it got MOST of mine cleaned up except for a single Registry entry that would not delete even when the program (MalwareBytes) said it would on reboot.

I tried to delete it using REGEDIT and it said it couldn’t delete (in use). The virus did a tricky thing by assigning the registry “key” to another user then deleted that user so I couldn’t delete it. I reset the permissions on the registry key to allow my user (administrator) to access it and I finally got that last registry entry deleted. I think I’m virus free now.

The ‘moral of the story’ is that no matter what I ran (MalwareBytes, Combofix, Spybot, Spyware Doctor, etc....) it would not delete that last registry entry until I did it manually. GOOD LUCK!


24 posted on 12/19/2008 2:12:17 PM PST by copaliscrossing (Progressives are Socialists)
[ Post Reply | Private Reply | To 1 | View Replies]

To: prisoner6

try this...on another computer download AVG into a flash drive.

take flash drive and install it into infected comp. run AVG.

after set up..run scan


25 posted on 12/19/2008 2:37:33 PM PST by OL Hickory (Where is the America I knew as a boy?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mysterio; prisoner6
I would use Malware bytes. This program fixed my system from a couple other serious virus attacks. Make sure and click "update" befo0re you run it the first time.

For whatever it's worth, Malwarebytes is highly recommended by the forum I used a few years ago when I had a pile of "interesting" infections.

Next to that, I'd suggest Avast!

26 posted on 12/20/2008 1:19:37 AM PST by backhoe (All across America, the Lights are going out...)
[ Post Reply | Private Reply | To 10 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson