[RESOLVED] :) Virus???

[3fingersalute]

Anybody see a virus that pops up a dialog box with a http://forums.windrivers.com/cgi-bin/forum/smile.gif in it everytime you try to run anything??

It also gives some funky spanish message next!

------------------
Is it because light travels faster than sound that some people appear bright until they speak????

[KoWind7]

It's either Navidad, or the variant.

The writeup is on Norton's Site. I'd post the address, but I'm having trouble posting the html.
------------------
-- What? No more Jolt!?!?

[This message has been edited by KoWind7 (edited March 07, 2001).]

[This message has been edited by KoWind7 (edited March 07, 2001).]

[3fingersalute]

Well, I found where it is loading, it is loading a file called wintask.exe in the HKEY_CLASSES_ROOT\exefile\shell\open\comand\ key.

I have deleted wintask.exe and restored this key to %1"%.....but does anyone know what virus this is, so I can research it to see what else I might need to do to insure this machine is completely clean from it?

------------------
Is it because light travels faster than sound that some people appear bright until they speak????

[3fingersalute]

well, after getting it clean enough that I could actually run programs, I ran norton, and sure enough, it was identified as the Navidad!.....Kudos to you KoWind7 !!

------------------
Is it because light travels faster than sound that some people appear bright until they speak????

[KoWind7]

If I haven't seen a new virus, I'm shocked. Our customers, for the most part, are morons. Sell them NAV, and they NEVER update it. I check Norton's site every day to see what virus the next few systems I see will have.

------------------
-- What? No more Jolt!?!?