Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

new backdoor/virus scrsave.scr .. any help please


  • Please log in to reply
2 replies to this topic

#1 phantom

phantom

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:49 AM

Posted 13 July 2005 - 08:54 PM

Hello folks,
I am new member saying hello and also requesting any available info on how to get rid of this new backdoor/virus.

I operate win2kpro... kerio firewall, kaspersky anti virus, adaware, spybot search and destroy... this new backdoor shows up in task manager as "scrsave.scr" it attacks and makes the kaspersky anti virus non working (don't know what else it does). I am able to delete it from the taskmanager but as soon as you boot up again it starts up.

Does anyone here have info on how to get rid of it totally.. I have also done the online housecall Trend Micro and it is also unable to delete it.

Thanks in anticipation.

regards
Phantom

BC AdBot (Login to Remove)

 


#2 phatcat42141

phatcat42141

  • Members
  • 107 posts
  • OFFLINE
  •  
  • Local time:09:49 AM

Posted 13 July 2005 - 10:11 PM

Here is a link for ya --

http://www.bleepingcomputer.com/startups/s....scr-10995.html

#3 stidyup

stidyup

  • Members
  • 641 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:49 AM

Posted 14 July 2005 - 02:21 AM

If you think you are infected submit a hijackthis log here.

How to submit a hijackthis log

Download Hijackthis

Try running the following from safe-mode Sysclean you'll also need the virus template file from here lpt***.zip

or

DrWeb CureIT

If your good with the command line also try Sophos Command Line scanner

Also install and run A2 Free and Ewido

I'd also run Spybot and Adaware




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users