need help with virus *urgentish*

[BennyD]

a few days ago i noticed a process called "beta.exe", this process was running and trying to access the internet.

i thought i'd end it and brought up task manager, then it just closed itself

i tried a few times but it would close every time, i think that this beta.exe was killing the task manager process

then i did "taskkill /f /im beta.exe" from a command prompt, that got it.

next i try and get it with a AV app but it can't find any, even with the latest definitions.

next thing i look in my startup and find 2 entries of this program, i remove these and think that i have got it, just to be safe i rename the beta.exe and restart

upon restarting i am greeted by the message "windows cannot find beta.exe" but there is nothing in the startup, or the registry that is starting it.

does anyone know how this could be trying to run? it's really starting to bug me now.

any help appreciated

 

[Mallow]

Try not to let Skynet take over, k?

 

[BennyD]

heh, no really, i'm wondering what else could be launching this thing.

startup sentry couldn't find anything, nor could regcleaner

 

[WarCon]

Did you check and see in msconfig.exe whether there are any entries in system.ini or win.ini or even services?

 

[TheBoyBlunder]

did you run ad-aware or spybot?

 

[BennyD]

Warcon: yup

TheBoyBlunder: yup

also had a look on google but i can't find this virus anywhere

 

[ReiAyanami]

that's because its the beta version.

 

[ReiAyanami]

u should see the the retail-boxed version of this virus, its sometimes labeled as WinXP or something and made by a shady company named microsoft

 

[GeneValgene]

Originally posted by: ReiAyanami
that's because its the beta version.

ROFL

 

Try running a scan on your system after you boot into safe mode. Sometimes that will correct the problem.

 

[Legendary]

Start -> Run -> msconfig
See if it's in there, anywhere. If so, delete it but be careful what you delete.

 

[kt]

You may want to check your Services. A virus can be started from there. Check for unusual service entry. I have seen a virus disguising itself as llS Web Service. Noticed the first two letters are lower case L's.

 

[Hossenfeffer]

What sort of software are you running? Kazaa in the mix anywhere?

Which AV program(s) are you using?

Have you tried an anti-virus scan from safe-mode?

 

[BennyD]

Originally posted by: Hossenfeffer
What sort of software are you running? Kazaa in the mix anywhere?

Which AV program(s) are you using?

Have you tried an anti-virus scan from safe-mode?

kazaa is in the mix, but i only download uninfectable files, i think it was installed with a piece of software

i'm using AVG 6

no, but i'll try that now