Re: Winregs32.exe shhypc.exe Pest Patrol
From: Chek (chek_16_at_hootmail.com)
Date: 08/13/04
- Next message: mac1: "Results of Spybot Search"
- Previous message: Nitish Prasad: "Problem connectin the internet"
- In reply to: Alan Andrew: "Re: Winregs32.exe shhypc.exe Pest Patrol"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 13 Aug 2004 00:30:11 +0100
Some files can have super hidden attributes (it was explained to me once but
I don't really get it).
One way to tackle it would be to use a prog like 'Advanced Process
Manipulator' from
http://www.diamondcs.com.au/index.php?page=apm
This will allow you to examine all the processes going on in XP and see the
.exe files, associated .dlls
in use by each. You can get the command line which helps with locating the
files, and unload
stubborn .dlls which are undeletable while in use..
I use it the hard one-process-at-a-time way (an internal search function
would be good!) in conjunction
with 'HiJack This' logs.
Have you tried the 'AdAware/CWS/Spybot/HiJackThis' route to help with the
problem yet?
With the speed of change and development in the Trojan world my unasked for
opinion is that I
feel happier using related products from different sources, rather than one
product with possibly
just the one method of tackling the problem.
Chek
-- Change' boos' to 'bos' in address to email directly "Alan Andrew" <alandna@telus.net> wrote in message news:nVPSc.8531$X12.3289@edtnps84... > My TSR virus scan and manual scanner, nor any web-based virus scanner > picks it up. I know Pest Patrol is not "anti-virus" but it's the only > pgm that reports the two files. > > Malke wrote: > > Alan Andrew wrote: > > > > > >>Daily, hourly, I get popups from Pest Patrol that these two files are > >>trying to get into the startup directory. I click that I do not want > >>that to happen. I can find no other reference to them in any newsgroup > >>or on the web. I don't believe they are random letter combinations; I > >>don't believe they are a part of XP Pro or any downloaded software. I > >>believe they are hidden in some normal-looking file like "syshost" or > >>..... > >> > >>I am also aware that Pest Patrol is fairly aggressive even delusional > >>(paranoid) about strange filenames. > >> > >>I have done many searches in my c. for these files, without success. > >> > >>I have also been told by my workplace IT guru that some viruses, > >>trojans, etc. are relatively harmless and need not be deleted. And > >>sometimes I find a virus that I learn is relatively harmless. But I > >>don't want to instigate any flame-throwing, please! > >> > >>Any ideas would be greatly appreciated. This problem is more of an > >>itch than a sting or a kick to the groin. > >> > >>Alan in Vancouver, BC > > > > > > If you do a Google on "Winregs32.exe" you'll get plenty of links > > suggesting this is a virus. Searching for "shhypc.exe" brings up > > nothing, which is suspicious and indicates it's probably a trojan. What > > does a scan with a current antivirus program (meaning a version not > > earlier than 2002 and using updated virus definitions) show? Pest > > Patrol is not an antivirus. > > > > Malke > > > > MS MVP - Windows Shell/User > > Elephant Boy Computers > > www.elephantboycomputers.com > > "Don't Panic!"
- Next message: mac1: "Results of Spybot Search"
- Previous message: Nitish Prasad: "Problem connectin the internet"
- In reply to: Alan Andrew: "Re: Winregs32.exe shhypc.exe Pest Patrol"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
