Virus like activity, any suggestions?

  • Thread starter Thread starter Nick Sprankle
  • Start date Start date
N

Nick Sprankle

Hiya,

I've seen this problem an a couple of machines, I was wondering if anyone
has encountered it.

On WinXP machines, there are a couple of processes that seem to be randomly
named that look suspect. When I terminate the process, another one comes up
having its own random name. Nothing in the startup regristry keys or
folders.

I know i'm a little vauge, but so is the problem...

Thanks,
Nick Sprankle
 
Nick:

You need to scan the PC with a local or on-line virus scanner and see what comes up. The
results will provide you the next step of what needs to be done to mitigate the problem.

Dave

| Hiya,
|
| I've seen this problem an a couple of machines, I was wondering if anyone
| has encountered it.
|
| On WinXP machines, there are a couple of processes that seem to be randomly
| named that look suspect. When I terminate the process, another one comes up
| having its own random name. Nothing in the startup regristry keys or
| folders.
|
| I know i'm a little vauge, but so is the problem...
|
| Thanks,
| Nick Sprankle
|
|
 
I've scanned with norton.. all with the newest defs.. it doesn't pick
anything up.
I ran spybot too to see if its any kind of spyware... no dice.

Thanks,
Nick Sprankle
 
Nick Sprankle said:
Hiya,

I've seen this problem an a couple of machines, I was wondering if anyone
has encountered it.

On WinXP machines, there are a couple of processes that seem to be randomly
named that look suspect. When I terminate the process, another one comes up
having its own random name. Nothing in the startup regristry keys or
folders.

I know i'm a little vauge, but so is the problem...

Thanks,
Nick Sprankle
Click to expand...

Try pcpitstop.com click on "full tests" in the upper left corner. The
main pcpitstop screen is full of ads and a bit confusing.
 
Nick Sprankle said:
I've scanned with norton.. all with the newest defs.. it doesn't pick
anything up.
I ran spybot too to see if its any kind of spyware... no dice.

Thanks,
Nick Sprankle
Click to expand...

Sounds like a trojan called Donald Dick and BTW, signature-based
technologies such as AV can always be defeated.
 
Nick Sprankle said:
I've seen this problem an a couple of machines, I was wondering if anyone
has encountered it.

On WinXP machines, there are a couple of processes that seem to be randomly
named that look suspect. When I terminate the process, another one comes up
having its own random name. Nothing in the startup regristry keys or
folders.

I know i'm a little vauge, but so is the problem...
Click to expand...

Check http://invircible.com/item/59 and see if it answers your question.

Regards
 
Back
Top