ryr.exe--info please

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View


A friends computer running Win XP Home has been infected by numerous
virus /malware etc.
I have run several antivirus programs  such as Trend Micro ,Antivir and
Malware Bytes.
The machine  now appears to be clean but will not start in Safe
mode,there is no Run mode nor msconfig available.
There is a popup on startup looking for ryr.exe which a search on Google
reveals as malware.
I would appreciate some help in getting this system back in good order
again.
Regards,Richard

Re: ryr.exe--info please




| A friends computer running Win XP Home has been infected by numerous
| virus /malware etc.
| I have run several antivirus programs  such as Trend Micro ,Antivir and
| Malware Bytes.
| The machine  now appears to be clean but will not start in Safe
| mode,there is no Run mode nor msconfig available.
| There is a popup on startup looking for ryr.exe which a search on Google
| reveals as malware.
| I would appreciate some help in getting this system back in good order
| again.
| Regards,Richard

Find the place the loads ryr.exe and remove it so the OS no longer wants to load
it.

What do you mean no "Run mode "  ?
There is no "Run" as a statup item ?

As for the no Safe Mode, it could be the load sequence to load Safe Mode has
been too
corrupted to work anymore.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: ryr.exe--info please




Thank you for your help Dave---
I finally could not get into the drive at all--not even the recovery
disk worked,so I ran Linux Ubuntu from dikk and managed to retrieve some
of the important files.
When that is complete I will format the drive and reload whatever is
necessary.
Kindes regards,Richard



On Wed, 20 Jan 2010 06:37:49 -0500, "David H. Lipman"

Quoted text here. Click to load it


Re: ryr.exe--info please





| Thank you for your help Dave---
| I finally could not get into the drive at all--not even the recovery
| disk worked,so I ran Linux Ubuntu from dikk and managed to retrieve some
| of the important files.
| When that is complete I will format the drive and reload whatever is
| necessary.
| Kindes regards,Richard


OK -- Good luck with it.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: ryr.exe--info please



wrote:

Quoted text here. Click to load it

Short answer to get the system back in good order:
It is time to do a "Format C:\" and reinstall Windows.

--
Fred W. (NL)

Re: ryr.exe--info please




Quoted text here. Click to load it

Is the format really necessary tho?


--
"Is there anything in Guul Draz that doesn't suck the life out of you?"
 - Tarsa, Sea Gate sell-sword.


Re: ryr.exe--info please



On Wed, 20 Jan 2010 22:33:44 GMT, Dustin Cook
Quoted text here. Click to load it

Of course not, but usually this answer has more impact than just saying
"reinstall Windows".

(and some people even think that "reinstall" can be done over the
existing Windows, which "reinstall" solves nothing.)
 ;-)

--
Fred W. (NL)

Re: ryr.exe--info please





Richard Oliver wrote:
Quoted text here. Click to load it

Found this and it may help you locate and rid yourself of that ryr.exe.
"SOFTWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY
1. COVERT ANALYSIS OF: 0BXFHZ.EXE
  a.. File Names Used: 3
  b.. Paths Used: 1
  c.. Common File Name: 0BXFHZ.EXE
  d.. Common Path: %TEMP%\
  e.. Vendor Information: No Vendor details specified
  f.. 0BXFHZ.EXE may use 3 or more path and file names, these are the most
common:
  g.. 1 :%TEMP%BXFHZ.EXE
  h.. 2 :%TEMP%\RYR.EXE
  i.. File Name Structure: Normal
  j.. File and Path Structure: Normal"
Buffalo



Re: ryr.exe--info please




Quoted text here. Click to load it

You sure do run across alot of friends or relatives suddenly in need of
your assistance. :) Have you tried checking the mbam forums? They do
offer assistance. I'll give you the benefit of the doubt for now and
assume you really are just a normal user trying to help your friends,
and not some wannabe technician :)


--
"Is there anything in Guul Draz that doesn't suck the life out of you?"
 - Tarsa, Sea Gate sell-sword.


Re: ryr.exe--info please



Thankfully I do not usually receive snide remarks from people and I do
not believe in wasting time on these things  but----
I am an 81 yr old retired Mech Engineer who tries to keep his  mind
going by helping people (mostly friends and family) who have computer
problems and when I run into some new problem I am fortunate to be able
to ask for help from people like the ones that kindly responded to this
query.
And my grateful thanks to them all ---I consider them too as "friends".
Regards ,Richard

On Wed, 20 Jan 2010 22:33:07 GMT, Dustin Cook

Quoted text here. Click to load it


Re: ryr.exe--info please



Richard Oliver wrote:
Quoted text here. Click to load it

*Most* people on *most* newsgroups are good people. alt.comp.anti-virus
is like that. You've probably spotted the few bad apples that show up here..

Re: ryr.exe--info please



Quoted text here. Click to load it

In that case, nothing wrong with a good old fashioned wipe and
reinstall ;-)

Quoted text here. Click to load it

Re: ryr.exe--info please




Quoted text here. Click to load it

I didn't intend the comment as a snide one. In my line of work, it's not
unusual to find someone posting for help for a few seperate issues withen a
few days and then find out the person isn't some nice neighbor but a pc
repair shop technician who's looking for a handout.

I won't apologize for my natural skeptism, but I do apologize if I have
errored in your case.



--
"Is there anything in Guul Draz that doesn't suck the life out of you?"
 - Tarsa, Sea Gate sell-sword.


Re: ryr.exe--info please



Thanks Dustin and kind regards,Richard

On Mon, 25 Jan 2010 20:52:05 GMT, Dustin Cook

Quoted text here. Click to load it


Site Timeline