Re: canti.exe
From: MGGP (anonymous_at_discussions.microsoft.com)
Date: 11/06/04
- Next message: Ron Bogart: "Re: aarrghh laptop + sp2"
- Previous message: Alex Nichol: "Re: SP2 and ebay"
- In reply to: Rick \: "Re: canti.exe"
- Next in thread: Malke: "Re: canti.exe"
- Reply: Malke: "Re: canti.exe"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 6 Nov 2004 07:56:05 -0800
Thanks Rick, and Malke too.
I searched the drive for this program, it's not there,
probably being launched by a dll or something I guess.
But even when I scan the system, including hidden and
system files for the string "canti.exe" it's not found.
It (canti.exe) also runs in SAFE mode. I wish there were
a Windows (or third party) function that one could name a
process in and tell it "If this program tries to run,
prevent it from doing so". I'll try your suggestions,
thanks.
MGGP
>-----Original Message-----
>Hi MGGP,
>
>It's a trojan (virus) file. Follow these "relatively"
simple removal steps:
>
>Restart in Safe mode by hitting F8 as Windows first
begins to load on boot.
>Logon as administrator. As this can be tricky, you will
find help in doing
>this here:
>http://www.rickrogers.org/fixes.htm#Safe%20mode
>
>Start/search/files and folders, look for canti.exe and
delete it wherever it
>is found.
>
>Start/run regedit, expand the + signs to look under these
keys:
>
>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run
>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run
>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared
Tools\MSConfig\startupreg
>
>Look in the right hand pane for the string or strings
that load that file.
>Delete just those strings that contain the reference. Do
not delete other
>strings or the keys from the left pane. Close the
registry editor when
>completed, make sure you check all strings.
>
>Go to the Control Panel/System/System Restore tab. Check
the box to "Turn
>off system restore on all drives". Click apply/ok. This
will remove all
>restore points, however you don't want them back as some
or all of them will
>contain the virus depending upon how recently you got
infected.
>
>Restart the system normally. Go back to the Control
Panel/System and restart
>System Restore.
>
>Update your antivirus software, run a full system scan.
>
>--
>Best of Luck,
>
>Rick Rogers, aka "Nutcase" - Microsoft MVP
>http://mvp.support.microsoft.com/
>Associate Expert - WindowsXP Expert Zone
>www.microsoft.com/windowsxp/expertzone
>Windows help - www.rickrogers.org
>
>"MGGP" <anonymous@discussions.microsoft.com> wrote in
message
>news:06ca01c4c40d$75e5a620$a501280a@phx.gbl...
>> Hello -
>> I have a Dell laptop that has a process that runs
>> constantly (canti.exe). Each time I terminate the
process
>> it re-starts immediately. I have updated the Norton
anti-
>> virus, Adaware and SpyBot - after it was detected by
>> Adaware, Adaware stopped working. I can find no
>> information about this program on Google or anywhere
>> else. Short of re-loading the system, does someone out
>> there have a useful idea ? The process consumes between
>> 20% and 80% of the CPU time and is a real drag on the
>> system.
>> Thanks,
>> MGGP
>
>
>.
>
- Next message: Ron Bogart: "Re: aarrghh laptop + sp2"
- Previous message: Alex Nichol: "Re: SP2 and ebay"
- In reply to: Rick \: "Re: canti.exe"
- Next in thread: Malke: "Re: canti.exe"
- Reply: Malke: "Re: canti.exe"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
