Strange popup (part 2)

[wfbberzerker]

you may remember the other question i asked a few days ago about the popup, and i got help thanks.

well, this time im getting a different kind of popup, and its weirder. basically, whenever im playing a game (or so it appears), the ms-dos prompt will open up and do this. it doesnt seem to occur when there isn't a full-screen game playing, and if i disconnect from the internet, the message doesnt occur. any ideas whats happening here?

 

[Zenmervolt]

I'm far from an expert, but it looks to me as though someone is trying to get into your box.

ZV

 

[wfbberzerker]

hrmm.... i think i may have set the dmz host to my ip.... that might have done it...

 

[stultus]

Just got done helping a firend remove a virus off of his system. It was giving the errors. NAV had cleaned it but these windows were popping up still. It was a nice, full trojan sitting in his /winnt/fonts directory... Check your registry for what's starting up with your computer. I bet you'll find something there that shouldn't be there.

 

[wfbberzerker]

Originally posted by: stultus
Just got done helping a firend remove a virus off of his system. It was giving the errors. NAV had cleaned it but these windows were popping up still. It was a nice, full trojan sitting in his /winnt/fonts directory... Check your registry for what's starting up with your computer. I bet you'll find something there that shouldn't be there.

what folder would i look under to check startup programs?

 

[Yomicron]

Originally posted by: wfbberzerker

Originally posted by: stultus
Just got done helping a firend remove a virus off of his system. It was giving the errors. NAV had cleaned it but these windows were popping up still. It was a nice, full trojan sitting in his /winnt/fonts directory... Check your registry for what's starting up with your computer. I bet you'll find something there that shouldn't be there.

what folder would i look under to check startup programs?

you're using win2k right? download the msconfig utility for XP from here

run it and click the startup tab to see all that gets run when the system starts.



(if you are using an OS other than 2k just click Start -> Run and type "msconfig")

 

[wfbberzerker]

Originally posted by: stultus
Just got done helping a firend remove a virus off of his system. It was giving the errors. NAV had cleaned it but these windows were popping up still. It was a nice, full trojan sitting in his /winnt/fonts directory... Check your registry for what's starting up with your computer. I bet you'll find something there that shouldn't be there.

yahar!

 

[stultus]

Keep looking.. like I said, in my case NAV killed the virus but left all its crap behind. It is still probably running from inside your registry. Also, for 2k I used StartupCPL (google for it).