Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: "Virus" - GET ALL PASSWORDS

27 Dec 2010   #11
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Hi Kathy,

Firstly, you did exactly the right thing by not clicking it - the first step to good security is awareness.

Can you tell us a bit about this laptop please? Acer? Gateway? Has that password thing always been there since you bought it?

Regards,
Golden


My System SpecsSystem Spec
.
27 Dec 2010   #12
Kathy

Windows 7 Ultimate 32-bit SP1
 
 

Oh, it been removed now... suddenly i can't see it on desktop :S
My System SpecsSystem Spec
27 Dec 2010   #13
NoN

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
 
 

Go in start menu then click run and type, msconfig go in start up tab...you can slice the list with screenshots using the capture tool...

So then, reboot and see if it reappears!!
My System SpecsSystem Spec
.

27 Dec 2010   #14
Kathy

Windows 7 Ultimate 32-bit SP1
 
 

HP Pavillion dv5
I see this icon everytime i startup the computer.
Sometimes it suddenly disappears, but this time it took so much time than ever to let me Prntscrn of it .
and now .. it disappeared again ..
My System SpecsSystem Spec
27 Dec 2010   #15
Kathy

Windows 7 Ultimate 32-bit SP1
 
 

MSConfig - Startup


Attached Thumbnails
"Virus" - GET ALL PASSWORDS-msconfig.jpg  
My System SpecsSystem Spec
27 Dec 2010   #16
SledgeDG

Windows 7 Ultimate x86
 
 

Kathy: in that case you either have a so called "Dropper" on your system or you visit pages that upload that exe to your computer again and again...
If you have Malwarebytes run a full scan and it doesn't find the dropper, there is no way of knowing what really causes this file to reappear.

If it comes through the browser, I would switch off Javascript, stay away from any P2P Soft for the time being
It could even come through some Flashplayer etc...

You could also test some online AVs from this thread:
Online File Scanner Sites

-DG
My System SpecsSystem Spec
27 Dec 2010   #17
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Mmm......I wonder if this is some form of bloatware. Is your Windows an OEM version?
My System SpecsSystem Spec
27 Dec 2010   #18
Kathy

Windows 7 Ultimate 32-bit SP1
 
 

Ok guys, I'll do all steps you wrote..
I'll check after Online scanning and rebooting if it appears another time, If yes, so I'll replay back..
My System SpecsSystem Spec
27 Dec 2010   #19
NoN

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
 
 

Thought that first of bloatwares password recovery from the manufacturer...but if it isn't inside an uninstaller then...might be a malware.
My System SpecsSystem Spec
27 Dec 2010   #20
SledgeDG

Windows 7 Ultimate x86
 
 

one more idea in case the culprit can't been found:
Make sure you see extensions of known files

next time when the exe reappears, delete it and then take any Text file, name it "GET ALL PASSWORDS.EXE"
Set it to read only and see if that malware file comes back by getting around this "construct"
I bet it doesn't
-DG
My System SpecsSystem Spec
Reply

 "Virus" - GET ALL PASSWORDS




Thread Tools




Similar help and support threads
Thread Forum
Changing Passwords "Breaks" Win7Pro Workgroup
Just set up a workgroup for my desktop (my pc), laptop (wife's pc), and two external backup drives. Did some additional drive mapping for access ease. Everything is shared in both directions and functioning properly. ISSUE: The passwords were set up the same on both computers, and now I ...
Installation & Setup
"RPC Virus virus" message in action center?
I've had no problem with my computer in the past two days, yet I see an action center message today, supposedly from yesterday, warning me that "This problem was caused by the RPC virus, a known computer virus" and no further information. Since I've gotten no notification from my usual...
System Security
Changing the "minimize" "maximize" and "close" buttons of a theme
Ok so I'm using a custom visual style made by another user however I don't really like the buttons used that I mentioned above. The creator states it is acceptable to change the theme to however you like as long as you don't redistribute it anywhere. Ok so I opened up the .msstyles file (using...
Customization
BSOD every few hours: mostly "STOP: 0x00000F4", "c00021a" & "c0000135"
Hi everyone! Yesterday my HP laptop (Windows 7) started getting BSOD with various types of errors (mostly "STOP: 0x00000F4", "STOP: 0x0000007A", "c00021a" and one "missing %hs, c0000135"). Most of the time it restarts without any issues and works fine right after the BSOD and then an hour or two...
BSOD Help and Support
Need to add "TASKBARS" (MSese for "Launchpads", "Docks" NOT "Toolbars"
My office just upgraded, and I can no longer use Windows XP. On this system, I was able to add a separate taskbar to facilitate quick access to commonly-browsed folder locations on our vast network, and another one expedited the launching of useful programs and lists. Each task on each taskbar...
General Discussion
How can I be sure if I am still infected with "Win32/Small.CA" virus".
Hi I got a "Solve PC Issues" (white flag) saying "Remove the Win32/Small.CA virus". I am running MSE (Microsoft Security Essentials) on Windows 7 Pro (x64). So I did an update followed by a full scan using MSE. I then ran - Malware Anti-Virus - SUPERAntispyware - Microsoft Safety Scanner...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:58.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App