Specialty Forums
Security and Virus
General Hardware
CPUs/Overclocking
Networking
Digital Photo/Video
Office Software
PC Gaming
Console Gaming
Programming
Database
Web Development
Digital Home

General Forums
Windows XP
Windows Vista
Windows 95/98
Windows Me
Windows NT
Windows 2000
Win Server 2008
Win Server 2003
Windows 3.1
Linux
PDAs
BeOS
Novell Netware
OpenVMS
Solaris
Disk Op. System
Unix
Mac
OS/2

Drivers
Driver Scan
Driver Forum

Software
Automatic Updates

BIOS Updates

My Computing.Net

Solution Center

Free IT eBook

Howtos

Site Search

Message Find

RSS Feeds

Install Guides

Data Recovery

About

Home
Reply to Message Icon Go to Main Page Icon

Subject: Virus deletes startup entries!AH!!

Original Message
Name: roe_echo
Date: April 28, 2008 at 09:52:39 Pacific
Subject: Virus deletes startup entries!AH!!
OS: XP
CPU/Ram: 1 gb
Model/Manufacturer: Dell (inspiron 6400)
Comment:
hey, i caught a virus on my laptop yesterday because i was stupidly downloading software from download.com which i found out is full of viruses. This virus keeps trying to delete my start-up entries and i'm afraid it will delete an important file for windows. luckely i have spybot-serch and destroy which is blocking it but if i turn off my computer, i'm afraid it will delete all my start-up entries before spybot loads on start-up, so i use hibernate instead but i can't use it forever! any ideas?????

plz help..tnx


Report Offensive Message For Removal

Response Number 1
Name: TheNerd
Date: April 28, 2008 at 15:49:52 Pacific
Subject: Virus deletes startup entries!AH!!
Reply: (edit)
Honestly, I highly doubt you got a virus from download.com. This site is owned by Cnet and is very reputable. They have strict policies against spyware and software.

Tech Alpha Computer Forums


Report Offensive Follow Up For Removal

Response Number 2
Name: Jeruvy
Date: April 29, 2008 at 08:51:59 Pacific
Subject: Virus deletes startup entries!AH!!
Reply: (edit)
Statistics show that 63% of all Windows tools are malware orientated. (SANS referencing over 54,000 packages available)

It's highly possible especially since the majority of problems are related to 'misleading applications'. Honestly it's been a long time since I've seen a real virus, but malware encompasses a great deal of similar unwanted activity which I'll just lump together for ease of discussion.

CNET is not immune to this behavior.
There was a Chinese company that is STILL shipping MP3 players that are infected right from manufacturing! Anyways...

That all said, WHAT did you download?
If you can't state what you downloaded or if you were download happy and clicking everything, then make a list and post it here please. Most browsers should have a list you can review.

If you can't tell us what you downloaded, then I'd say you shouldn't be making claims like this. To fix your problem/infection you'll need to do some basic stuff. Start with this:

Download a copy of Dr.Web CureIt. http://www.freedrweb.com/cureit/

Reboot your computer in "SAFE MODE" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with Dr.Web CureIt as follows:

* Double-click on cureit.exe to start the program. An "Express Scan of your PC" notice will appear.
* Under "Start the Express Scan Now", Click "OK" to start. This is a short scan that will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it.
* Once the short scan has finished, Click Options > Change settings
* Choose the "Scan tab" and UNcheck "Heuristic analysis"
* Back at the main window, click "Custom Scan", then "Select drives" (a red dot will show which drives have been chosen).
* Then click the "Start/Stop Scanning" button (green arrow on the right) and the scan will start.
* When done, a message will be displayed at the bottom advising if any viruses were found.
* Click "Yes to all" if it asks if you want to cure/move the file.
* When the scan has finished, look if you can see the icon next to the files found. If so, click it, then click the next icon right below and select "Move incurable".
(This will move it to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if it can't be cured)
* Next, in the Dr.Web CureIt menu on top, click file and choose save report list.
* Save the DrWeb.csv report to your desktop.
* Exit Dr.Web Cureit when done.
* Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.

Fix anything it finds unless you know it's a false positive.


Cheers.

J.
j e r u v y a t y a h o o d o t c o m


Report Offensive Follow Up For Removal



Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Virus deletes startup entries!AH!!

Comments:

 
  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 


Data Recovery Software



Version Tracker Pro
Keep your software current and secure, effortlessly

Click Here for a Free Scan

Driver Agent
Automatically find the latest drivers for your computer.
Click Here for a Free Scan



The information on Computing.Net is the opinions of its users. Such opinions may not be accurate and they are to be used at your own risk. Computing.Net cannot verify the validity of the statements made on this site. Computing.Net and Computing.Net, LLC hereby disclaim all responsibility and liability for the content of Computing.Net and its accuracy.
PLEASE READ THE FULL DISCLAIMER AND LEGAL TERMS BY CLICKING HERE

All content ©1996-2007 Computing.Net, LLC