Jump to content

Recommended Posts

I can't find anything online about this virus or malware or whatever it is.  The event occurred when I opened an excel spreadsheet.  The virus or whatever it is turned all my excel spreadsheet files into application files and when you click on one of the files, it says ciayeah.exe cannot be found.  The modify date was the same on every file in my spreadsheet folder and the time is when I opened a worksheet. 

 

I think my Norton may have deleted the actual exe file when it scanned, but the damage was already done.  It put all my original excel files into a hidden directory called "Hidden" (retaining the .xml file extension) and created another directory called "Private", as well as creating duplicate but hidden folders for "My Music", "My Pictures" and "Favorites".  When I clicked on any of these hidden folders, I got a message that "ciayeah.exe not found."   I deleted all the files and directories, but Norton still found the ciayeah.exe file this morning and deleted it again.  I also cleaned my registry. 

 

Fortunately I had a backup, but has anyone else experienced this?  Will the file keep returning?  Is there anything else I need to do or a software that I need besides Malware and Norton - or a BETTER software to keep this from happening again?

Link to post
Share on other sites

Hello debimorgan! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.
Please follow the instructions here and then post your log files in a new reply in this thread:

http://forums.malwarebytes.org/index.php?showtopic=9573

Link to post
Share on other sites

  • 4 weeks later...
  • Root Admin

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.