RE: Suspected virus

From: pauly [MSFT] (pauly_at_online.microsoft.com)
Date: 03/30/04 

Date: Tue, 30 Mar 2004 20:38:49 GMT

detrmnd2,

You need to discover what is creating these links after each reboot and
stop that process.

In Windows ME the program may load from one of three places:

1. The Startup Folder on the start menu

2. The Registry (HKLM\Software\Microsoft\Windows\CurrentVersion\Run (or Run
Services)

3. The Win.ini. (Load= and Run=)

RECOMMENDATIONS:

Review the following KB Article and perform clean boot troubleshooting
using MSConfig:

267288 How to Perform a Clean Boot in Windows Millennium Edition
http://support.microsoft.com/?id=267288

281965 How to Troubleshoot Using the Msconfig Utility with Windows 98
http://support.microsoft.com/?id=281965

ADDITIONAL RECOMMENDATIONS:

Computer Viruses Description, Prevention and Recovery:
http://support.microsoft.com/default.aspx?scid=kb;en-us;129972

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Here is a KB Article that contains contact information for most Antivirus
vendors:
http://support.microsoft.com/default.aspx?kbid=49500

=========

This posting is provided "AS IS" with no warranties, and confers no rights.

Windows XP Security Homepage:
http://www.microsoft.com/windowsxp/security/default.asp

Windows 2000 Security Homepage:
http://www.microsoft.com/windows2000/security/default.asp

Top 10 Windows Newsgroups Security Questions:
http://www.microsoft.com/technet/newsgroups/default.asp?url=/technet/newsgro
ups/nodepages/sectop10.asp

=========
Paul Hayes, MCSE
Product Support Services
Microsoft Corporation
pauly@online.microsoft.com

--------------------
| From: "detrmnd2" <anonymous@discussions.microsoft.com>
| Subject: Suspected virus
| Date: Tue, 30 Mar 2004 08:41:24 -0800
|
| I run Windows ME and recently I've receiving an error
| message concerning a link that had no target. I attempted
| to remove programs that I didn't recognize from my
| computer, but the problem remained. Then I deleted files
| for the errored links, but every time I would restart my
| computer I would get a new error message for a different
| link. It appears that there is a program that is
| generating random link addresses that causes the error
| message to appear every tim I restart my computer. Anyone
| else ever experience this type of virus? Fix?
|

Relevant Pages

  • Re: Linux, X, ld, gcc, linking, shared libraries and stuff
    ... which is similar to "lazy binding"...but goodness knows what linker ... way of the "paging mechanism" to only load those pages which are actually ... > patch the pointer thereafter (i.e., dynamic linking). ... mechanism _IS_ there with Windows (though, ...
    (alt.lang.asm)
  • Re: Slow windows xp startup
    ... do you know how/have tried to boot into safemode? ... >> here is a copy of the Microsoft KB article for a clean boot in winxp: ... >> conflicts when you start Microsoft Windows XP. ... >> File, Process WIn.ini File, and Load Startup Items check boxes. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Studying abroad, devastating weird laptop problem
    ... - Normal Mode, Safe Mode with Networking, etc.), but no Safe Mode works ... load but it quickly slows down to a crawl, and takes about a minute to ... After this, Windows Calendar ... I've tried several things but I haven't had any success. ...
    (microsoft.public.windows.vista.general)
  • Re: memory reading and writing
    ... And, of course, during the boot process, it's mostly ... Plus, remember that Windows uses "on demand" loading...hence, an ... This conspires to mean that once initialisation is run (which is ... "avoiding" to load things until strictly necessary... ...
    (alt.lang.asm)
  • Re: win GAV,XP SP3,KB951784,KB951978,KB15597, updatesJuly 9th, sys
    ... Windows Defender ... do not the page load indicated on the browser)... ... The NAV is a part of NSW... ... I do not have the system set up to install updates.. ...
    (microsoft.public.windowsupdate)