[Resolved] Windows System File AEFAH.EXE

How do I recover Win System file aefah.exe?

  • Recover from a Windows CAB file

    Votes: 0 0.0%
  • Download the file from a server

    Votes: 0 0.0%

  • Total voters
    0
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

ebatson

Thread Starter
Joined
Dec 1, 2001
Messages
5
System is Win95 B. Installed Nortin AntiVirus 2001, rebooted. NAV did autoscan before Windows launched and found Sub-Seven virus in file C:\Windows\System\AEFAH.EXE - I chose
"quarantine" - bad move. Should have said "repair".
Windows still boots w/some functionality available
but file is used to launch ANY GUI app. Can't get into the
NAV Quarantine Console in Windows and I can't locate any options in NAV in DOS for that. Can access Control Panel but cannot launch any of the members (get missing aefah.exe msg) Can browse the Win95 CD - checked all CABS files for aefah.exe - no go. Tried booting from Win95 CD (to reinstall) but system not doing it. Checked BIOS - put CD in boot sequence still no go. Please try messaging answers as I'm not sure I can get to the email - maybe do both. Thanks
 
Joined
Dec 2, 1999
Messages
12,041
moving to security. That file was probably part of the virus, it's not a windows file. Seems like the virus was quarantined but not removed
 

TonyKlein

Malware Specialist
Joined
Aug 26, 2001
Messages
10,392
Hi Ebatson,

You don't need Aefah.exe, for it's a file generated by the trojan. Therefore you don't need to 'repair' it either.

Here is a site dealing with Subseven removals: http://www.hackfix.org/subseven/

It is however important to know the exact version of your Subseven trojan. If Norton can tell you that, check the site to know what steps you should take.

Maybe you should start by downloading a trial version of <A HREF="http://www.moosoft.com/intro.php">The Cleaner </A>
Update with Moolive after downloading, and scan your system.

Good luck,
 

ebatson

Thread Starter
Joined
Dec 1, 2001
Messages
5
Thanks. Downloaded The Cleaner and EXEfix08.
Will try The Cleaner 1st. Don't know what will
happen since Norton renamed file and moved it
to quarantine folder. Could try copying back with
orig name in DOS then rebooting and running
Cleaner but will have to see how it goes. I'm
using Netsurfer to access web right now. I was
actually able to get to Outlook Express thru this
little browser but can't launch from Desktop! Will
let you all know...
 

ebatson

Thread Starter
Joined
Dec 1, 2001
Messages
5
Can't install The Cleaner because GUI won't launch. Get msg that AEFAH.EXE is missing. Will try EXEfix08 and expext I'll have to recover and rename file from NAV quarantine folder (must do this in DOS) and try to run fix program.
 
Joined
Dec 9, 2000
Messages
45,855
The exefix08.com file will usually run from windows even when exes are not running.

In some cases however you may need to run a .inf or .reg file to get the fix to work; these are available on the ONLY IE link at the bottom of the Reticulated Toys page.
 

ebatson

Thread Starter
Joined
Dec 1, 2001
Messages
5
Thanks to all, espcially brianF and Rollin' Rog. I was able to run EXEfix08.com and it repaired my system. I had additionally done manual work on the system.ini and win.ini files thanks to info I found at the Reticulated Toys site.

This was a happy ending. After applying the fix I was able to launch Windows apps, get into Norton AntiiVirus and scan the whole PC. I found 3 more sub-seven-22 viruses on the box. They're all history now and the PC's back in business.

Again - thanks a million, couldn't have done it without you all.

:D
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online

Top