Picture.exe virus - need help?

Question

Okay, a friend sent me an email with picture.exe attached. I was really tired and wasnt thinking and just opened it. Immediatly noticing what i had done. Now... this seem to be an advanced version instead of the one that surfaced in 1998. I have no clue what this new one does, but i do know that this new one doesn't follow the same 'NOTE.exe' or 'MANAGER.exe' tendencies. Any idea what I can do to try and get rid of it and find out what damage its done? I have searched for Manager.exe and Note.exe but couldnt find either (or picture.exe). I have searched for the registry entry and couldn't find it... what else can i do? what else can it do?

Daniel

Answer 1

Picture.exe first surfaced right before Christmas, when some Net users were spammed with e-mail with the subject line "batty." Once a recipient opens picture.exe, that file expands into two other executables -- note.exe and manager.exe -- and places them into the Windows subdirectory.
PICTURE.EXE can also use the following file names:
NEW FOLDER.EXE, SSVICHOSST.EXE, BUZZ(27_5_07)BANO.EXE, SRC.EXE, CLASSES.EXE, BUZZ.EXE, BAK.EXE, PROJECT.EXE, REAL PLAYER.EXE, FINALIZED.EXE, WINDOWS MEDIA PLAYER 10.EXE, SHOAIB DOC.EXE, HIKA NEW BORN.EXE, AWA WED.EXE, HOME PIC.EXE, SULE.EXE, RED ERATHE SWATCH.EXE, HAROON.EXE, MAJU CONVICATION.EXE, MAJU.EXE, CARS.EXE, NEW FOLDER (8).EXE, NEW FOLDER (12).EXE, MY PLAYLISTS.EXE, 00098AFE.EXE, SAMPLE PLAYLISTS.EXE, SYNC PLAYLISTS.EXE, MA MUSIQUE.EXE, MES IMAGES.EXE, ÉCHANTILLONS D'IMAGES.EXE, MES VIDéOS.EXE, A0031519.EXE, A0031520.EXE.
The filename PICTURE.EXE refers to mutiple instances of an executable program.
The most common file size is 239,905 bytes. But the following file sizes have also been seen:
417,764 bytes, 268,288 bytes, 239,937 bytes & 240,128 bytes.
As far as I know McAfee AV with latest update can remove this element.
Alternatively, you can change your mail password for the time being to prevent hacking.

Answer 2

Internet security is the process of protecting data and privacy of devices connected to Internet from information robbery,
hacking, malware infection and Other Viruses , Trojans etc. Computer Viruses spread Mainly through the Internet when you either browse a website / Install a new program / Email letters etc.Always have your Computer protected by Installing an Anti Virus Program and with regular Virus updates for further Information check out http://tipsfromruby-Internetsecurity.blogspot.com/ will Safe guard you better

Answer 3

Well, you really need to determine which variant it is first to be able to deal with it effectively (you have not mentioned an exact name, other than picture.exe or any specific behavior that is occurring for example).

Symantec lists at least six different variants (search results are included below. Did you not have an up-to-date Anti-Virus program on the system? If you do, I would highly recommend updating and running a full system scan to see if it will detect it.

Your first point of contact would be your Anti-Virus vendor. Also, you may be able to receive assistance here: http://www.microsoft.com/protect/support/default.mspx

Here are some additional resources that may be useful: http://www.microsoft.com/protect/computer/viruses/default.mspx

Of course, there are online scanners you can use to scan your system, for example:

http://onecare.live.com/site/en-US/default.htm

And,

http://housecall.trendmicro.com/

I'm afraid that is the best I can do without knowing which specific variant it is. I hope you will find this information helpful. Good luck!

Answer 4

I Got A Virus Or Trojan!
http://forums.majorgeeks.com/showthread.php?t=27385

How to clean an infected computer
http://forum.grisoft.cz/freeforum/read.php?4,27725,backpage=

Malware Removal Guide
http://forums.majorgeeks.com/showthread.php?t=35407
http://www.geekstogo.com/forum/Malware-Removal-Guides-Tutorials-f121.html

Dealing with Unwanted Spyware and Parasites
http://mvps.org/winhelp2002/unwanted.htm

How to Protect yourself from malware!
http://forums.majorgeeks.com/showthread.php?t=44525

Understanding, Cleaning And Preventing Spyware
http://forums.majorgeeks.com/showthread.php?t=25834

Answer 5

If u opened that "picture.exe" file, is bad..that means that any file in your PC like (mp3 or jpg) will be copied and transformed by this virus into (mp3.exe, jpg.exe). It dosen't delete anything it just makes a double copy of the files on yor pc and renames them into ".exe" Example: if u have a photo (me.jpg) or a music file (blabla.mp3) the virus will react like this: it copies the name and the extension of the files (it dosen't destry the original ones) and renames it into ".exe" and u got (me.jpg.exe and blabla.mp3.exe) sounds awful...If u see this type of problem in your pc just give an antivirus scan, if have luck ur not infected, but if the antivirus won't help and u r infected...reinstall the operating system (Windows) Good Luck!

Answer 6

You could always buy a good Virus Software that protects against this kind of junk, Some Friend.
There are some free ones out there but I have NO Clue as to how good or Bad they are,
Don

Answer 7

Keylogger/Trojan.

Try downloading Anti-Keylogger Shield. It won't scan for the virus but it will prevent the spyware from sending your info out.

Then get AVG, Kaspersky, or some other antivirus.

Answer 8

check out
http://computer-probs.blogspot.com/
It not only gives complete solutions but also offers
free downloads of effective softwares which can detect
and eliminate all spy ware /virus /ad ware /Trojans completely.