Security

Ask something
Discussion Locked

virus like activity

0 helpful
5 replies

by faisalsalim

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

dear sir
in my office on many computers there many files automatically generating with the extention of rar,pif,exe,scr etc.,i have tried many antivirus softwares but they are failed to prevent those files generating again and again.
plz help me.thanks in advance.

5 replies

by thechas

2 things to try;

Install and run Lavasoft's AdAware. www.lafasoftusa.com

If your OS version has it, run msconfig and see waht programs are in the startup section. There may be some add / spy / scum ware installed. Uncheck any program that you don't recognise as required for your system, and use selective startup. If every thing works fine, then you have located the culprit. Find and remove the offending software.

If you do not have msconfig (Windows 95 and NT) you will need to search the hard way.
1. Right click on some of the files, and check if there is any identification for them. The company or program name may help you track down the software that is generating the files.
2. Check the startup section of the programsmenu.
3. Run sysedit, and check all files for software that is not needed. (you can disable these by adding rem and a space to the start of each line.
4. Run regedit. Use the search function, and search for runonce
Each time you find a runonce key, look back a couple keys, and check for software in the run, runonce, runonceecept keys.
You may find the offensive software there.
CAUTION!!!! USE REGEDIT WITH CAUTION. IMPROPER EDITING OR DELETEING KEYS CAN DISABLE THE PC!!!
BACK UP THE REGISTRY BEFORE EDITING!

It is possible that the files are generated whenever a certian application is run. Check the systems for any downloaded games, screensavers, excetera that may be the culprits.
After removing the files, monitor the software run on one of the affected PCs to see waht may be causing the files to be created.

by dwasserman

The best way to clean a disk is to extract it from the pc and put in a clean pc (in slave or secundary channel) with a powerfull antivirus (trend, nai, norton).
Run a full scan on suspicius disk, clean or remove the virus.

This discussion is closed to new replies.