OpenEuphoria

RE: [OT] I think I have a virus

• Posted by Alexander Toresson <toressonodakra at swipnet.se> Aug 13, 2004
• 516 views

Brian Broker wrote:
> 
> Greg Haberek wrote:
> > 
> > 
> > - Notepad closes randomly (actually I think its after a specific 
> > interval)
> > - Internet Explorer takes forever to start
> > - my start page has been set to some "Home Search" crap
> > - my memory almost maxes out right after windows starts (i use MaxMem by
> > AnalogX)
> > 
> > I ran Ad-aware, Anti-Vir, and Bazooka Spyware scanner, and stripped down 
> > my
> > boot with msconfig. I'm pretty sure its a virus or a worm or something.
> > Anyone have any ideas or suggestions?
> > 
> > ~Greg
> > 
> 
> When I suspect something odd going on I check taskmgr for unusual 
> processes.  I also check the registry for unusual things in
> HKCU\Software\Microsoft\Windows\CurrentVersion\Run and in
> HKLM\Software\Microsoft\Windows\CurrentVersion\Run.
> 
> If I find something odd I delete the reg entry and remove the binary 
> from my hard drive.  Check everything because sometimes they'll use 
> names that don't appear suspicious.
> 
> -- Brian
> 
> 

Also check HKCR\exefile\shell\open\command, so that no program is
'associated' with .exe's on your system. Viruses occasionally do that
to avoid always running in background, so they are harder to detect.
Some even disable you from using certain programs, like regedit.

Regards, Alexander Toresson

Shhh! Be vewy quiet! I'm hunting wuntime ewwows!