|
|
 |
|
|
Pages: 1
Anyone know what the process shelcode.exe is and how to get rid of it
(Click here to view the original thread with full colors/images)
Posted by: quizz
Every time I log on to my computer I have to delete this process called shelcode.exe for my deskop to come up.
Posted by: FadedMaster
Do you mean shellcode.exe? 'Cause you can get some results for that on Google.
Posted by: Canis Lupus
Mind telling us what Windows operating system you have?
Anyway, once you get back your desktop, do a search for the filename on your computer and see if it exists... if it exists, try renaming it and see if it allows you...
If it does, then you can go to START -> RUN -> then type msconfig then ENTER, and check the Startup tab for possible references to that file in your startup list... uncheck it if there's one...
Restart your computer and see if it works... If it still happens, there may be a registry entry to consider or maybe you should do a complete spyware/antivirus check of your computer... can't give more details coz we don't know what operating system you have... in any case, good luck.
Posted by: quizz
my computers details
Microsoft Windows XP
Professional
Version 2002
AMD Athlon XP 2500+
1.92 GHz
512 MB of RAM
74.5 GB Hard Drive
Posted by: quizz
I renamed the file, unchecked it from start up list ut it doesn't seem to do anything
Posted by: FadedMaster
 Quote:
|
Originally Posted by quizz
I renamed the file, unchecked it from start up list ut it doesn't seem to do anything
|
Does it still appear? Because if you've renamed it and unchecked it from the start up list, it shouldn't be appearing anymore. And make sure you are searching for all files, hidden and system files.
Tools->Folder Options->View, then make sure "Show hidden files and folders" is selected and uncheck "Hide protected operating system files." I had a trojan that infected itself as a protected operating system file and that was a bitch to get rid of.
Then when doing your search, click "More advanced options" and select "Search system folders," "Search subfolders," and make sure you are searching in all hard drives. Also make sure the "When was it modified?" and "What size is it?" both have "Don't remember" selected.
And once you have renamed it and removed it from the start up, reboot your computer. And check to see that a new one isn't written. Then it might be a trojan or something that hasn't been picked up by your AVS. So it might be in the registry, or even the Boot.ini or Win.ini and re-installing itself every time you reboot. Don't forget to check the "Startup" group.
Posted by: matt.modica
I searched for it on my computer and didn't find it.
|
|
|
|
|
