The old standby, restart in safe mode and then delete it. Should work.

Michael Ezekiel Mourn and weep for the Children of the World.

Hrm couldn't get any hits on it at the Norton or Vet site. Found a hit on google here but unfortunately it's in french and I don't speak it. Lots of references to GENVIRUS though, whatever that means. I'm not saying it is a virus, but there is a chance it could be a new one not yet picked up by the Anti Virus crews. Hence it's not showing up in your scans

Edited by - Mustang on 5/1/2004 6:00:47 PM

Heres one from McAfee. Link on it.
And another Link on it. the second sugjests this remedy
Manual Removal: Follow these steps to remove GenVirus from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
Stop Running Processes:

Kill these running processes with Task Manager:

elimgvir.exe
genvirus.exe
gv.exe
nuke-gv.exe


Remove Files:

Remove these files (if present) with Windows Explorer:

elimgvir.exe
genvirus.exe
gv.doc
gv.exe
gv.new
lisezmoi.doc
nuke-gv.exe



Michael Ezekiel Mourn and weep for the Children of the World.

Edited by - Finalday on 5/1/2004 6:12:21 PM

Edited by - Finalday on 5/1/2004 6:13:47 PM

Jeez discovered '93, so much for my theory, it's a donkey old one. Funny that your AV isn't picking it up, you'd think it'd stick out like dogs balls to your scanner.

This might sound like a really stupid question but, how do you restart in safe mode? Don't you have to push the F-Something key?

Its been a while since I had to, but, I think its the (del) Key when it is restarting.

Press "F8" repeatedly during the computer's startup, and a menu should appear allowing you to boot into Safe Mode.

It didn't work.

Check your task manager for these
elimgvir.exe
genvirus.exe
gv.exe
nuke-gv.exe

If any are there, try the sugjestion post above for them/it.

What didn't work? Using the "F8" key, or the deletion of the files through "Safe Mode"? Be specific man! Well, I should probably start concentrating now . Let's get down to basics; which version of Windows do you have? Is your machine a Compaq or other brandname PC?

Sorry, I meant that it didn't let me delete it once I got into safe mode. I run Windows ME on a Hewlett-Packard, and I use McAfee Pro Edition. And Finalday, there are no such tasks running on my task manager, I also searched for the program names you gave me and the only one was the "nuke_gv.exe", but thats the problem, when I right click on it to try to delete it it crashes Explorer, I tried to select it and hit the delete key but that didn't work, if I try to move the file it also crashes Explorer. I looked it up on Google and it said that it was a Trojan, but it seems like scanner would pick it up.

Edited by - spinnaker on 5/3/2004 2:02:51 PM

Have you searched the registery for it?

Here is all I have been able to dig up on it. Link to page You might want to try thier free download to get rid of it. Just a though.

File Information
About this File...
Our Filename: nuke-gv.exe
Size: 32683
Our Filedate: 3/15/1993
PVT: 1307078085
MD5: 74636eaac14f30331d3a52840df53333
About this Pest...
Score: 0*
PestName: GenVirus
Description:
Category: Virus Creation Tool. A program designed to generate viruses. Even early virus creation tools were able to generate hundreds or thousands of different, functioning viruses, which were initially undetectable by current scanners.
Author: J. Struss
Release Date: 11/20/2001

*A score of 0-5 is considered "safe", 6-14 "suspicious", and 15+ "dangerous." If no score is provided, this file has not yet been rated. For info on the meaning of other variables, click here.

More Details About this File...
Commentary: +4...Compressed with a tool commonly used by hackers (Lite 1.15 [EXE)
+10...Pest identified by PestPatrol.
+1...Program appears to be "signed" with known hacker handle or group name.
+2...Contains slang often used by hackers.
+2...Contains one or more "off-color" words.
19... TOTAL SCORE
0-5="safe" 6-14="suspicious" 15+="dangerous"
Calls:
Compiler: Assembly Language
Packer: Lite 1.15 [EXE
DLLs Referenced:
Extension:
Structure:
Internal Info:
Text: Not enough memory Null po er ass Divide access Disk TUrm aa Gat fE Se NuKE

Maybe Taw or Esq can go further with it.


Edited by - Finalday on 5/3/2004 5:06:35 PM

Well, if you can't delete them in Safe Mode, then I recommend using a WinME/98 bootdisk, and deleting the files through the CLI. Because Windows is not running in any form, all files should be deletable (if there is such a term). If you still can't delete them, try using "attrib -r %filename%". The files may also be hidden, so just use "attrib" in the directory in which the files are located, and you will be able to ID hidden files because they have an "H" in the display like so;

---

A SHR C:\ntldr
A SHR C:\NTDETECT.COM
A SH C:\boot.ini

---

As you can see, all these files are hidden.

Try that, and get back to us.

-----
Hell is being trapped for eternity in a room full of Trekkies - Jean-Paul Sartre

I'm way to tired to read this whole thing but you might have a bit of trouble with that win 98 boot disk if your hard drive is formatted in NTFS. In that case trying booting into safe mode with a command prompt and delete it using your l33t DOS 5killz.

Edited by - Mustang on 5/4/2004 1:47:32 AM