I get a virus alert each time I start my computer. I made sure that I have all the latest updates and patches on my Windows XP SP 3. At start up I get the following message.
“Note: This does not harm your computer as it does not contain virus” and once I click on Yes or No option I get the following alert.
“Warning a virus has been detected on your PC. Press YES to format your hard disk now or NO to format your hard disk after system reboot”
I see that the system timings have been changed and the system automatically shuts down as soon as the time reaches 12:00. I tried to perform a scan and found that my Antivirus has been disabled.
Please Help!
Virus alert each time I start my Win XP machine
Dear Michael Carter,
This error clearly indicates that you have a serious virus in your system and your antivirus has been infiltrated and trapped by virus and not in a position to repair or delete this virus.
Suggestions:
Uninstall your antivirus.
Try to scan your system online through https://www.bitdefender.com/toolbox/ and remove viruses which you found.
Secondly, download a fresh copy of best antivirus from web. After installation and updating of virus definition, you should run a complete thoroughly system scan to get rid off this error message. During or after scan, which viruses you found, just delete that files. There are no need to quarantine.
Take Care.
Jhony
Answered By
anrewbst
0 points
N/A
#85356
Virus alert each time I start my Win XP machine
Hi,
You may have a so-called "fake virus" created with a simple script. This script can harm your system, it depends by the commands launched by the malicious script. Normally, it's only a fake but it can be more dangerous like yours that had change system time and halt the system always at 12:00.
It can be launched on system startup simply adding a command like the following:
-
reg add HKLMSoftwareMicrosoftWindowsCurrentVersionRun /v
Solution:
-
Check with Windows Find Tool for the presence of a file called Virus.vbs; if no files found, check also for the extension vbs or bat (you may find the incriminated file in the startup folders : "C:Documents and SettingsUserStart menuProgramsStartup.
-
If the file found has the message printed on screen on startup in its content, you're win! Remove it!
-
If you can't find the file, make a "content search" with the windows find tool and search for the virus's strange warning message; remember to write the exact words of the message. You are safe. It's impossible that you get that strange message from windows or a real application.
-
The virus can also be started by a windows registry key, you must remove that key even you have just removed the virus: check the following registry key (to open registry editor click on start menu, go to run command and type regedit.exe):
-
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
-
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
-
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce
-
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce
If you have a string that launch your malicious script in the right side of your regedit, remove it.
4. Reboot your system and check if you no longer get the message.
5. Remember to re-enable your antivirus realtime monitoring and set system date and time.
To know more about how to make fake virus on Notepad, visit the link below:
On windows run registry keys:
Good luck,
anrewbst
