Post: I have a virus?
Options
03-09-2011, 09:17 PM
#1
Scouse_Dom
League Champion
on the top it says something like C:\ windows\system32\drivers\hosts.exe
do i have a virus? if so how do i get rid of it!? my AV hasnt detected it btw.
03-09-2011, 09:59 PM
#3
Groovy
Team Xbox
Originally posted by Dom
okay, since i opened this so called "patcher" every time i turn on my laptop a CMD box pops up and shuts dead fast!
on the top it says something like C:\ windows\system32\drivers\hosts.exe
do i have a virus? if so how do i get rid of it!? my AV hasnt detected it btw.
on the top it says something like C:\ windows\system32\drivers\hosts.exe
do i have a virus? if so how do i get rid of it!? my AV hasnt detected it btw.
Its probabily your "Environmental Values" not set up correctly to why the Cmd opens and closes instantly. You could edit whatever your running and see what path its trying to follow and correct it yourself to fix this.
If you think its a keylogger / RAT do the following:
Run Command Prompt as Admin > Type "Netstat -b" (without quotes)
Then all of your open connections at the moment will load up and you can see the programme / service that is running them. If their are any you find suspicious / dont recognise Google them to find out what they are. If you can figure out what they are chances are its because its not meant to be their.
Hope that helps
03-09-2011, 10:45 PM
#4
Oneup
Guest
Originally posted by Dom
okay, since i opened this so called "patcher" every time i turn on my laptop a CMD box pops up and shuts dead fast!
on the top it says something like C:\ windows\system32\drivers\hosts.exe
do i have a virus? if so how do i get rid of it!? my AV hasnt detected it btw.
on the top it says something like C:\ windows\system32\drivers\hosts.exe
do i have a virus? if so how do i get rid of it!? my AV hasnt detected it btw.
Originally posted by Troll
Its probably a internal mistake,
Tell me what Anti-virus you use and take a screenie of the Processes that are running once you started your computer up :y:
I might be able to help you
Tell me what Anti-virus you use and take a screenie of the Processes that are running once you started your computer up :y:
I might be able to help you
Originally posted by iGroovy
Its probabily your "Environmental Values" not set up correctly to why the Cmd opens and closes instantly. You could edit whatever your running and see what path its trying to follow and correct it yourself to fix this.
If you think its a keylogger / RAT do the following:
Run Command Prompt as Admin > Type "Netstat -b" (without quotes)
Then all of your open connections at the moment will load up and you can see the programme / service that is running them. If their are any you find suspicious / dont recognise Google them to find out what they are. If you can figure out what they are chances are its because its not meant to be their.
Hope that helps
If you think its a keylogger / RAT do the following:
Run Command Prompt as Admin > Type "Netstat -b" (without quotes)
Then all of your open connections at the moment will load up and you can see the programme / service that is running them. If their are any you find suspicious / dont recognise Google them to find out what they are. If you can figure out what they are chances are its because its not meant to be their.
Hope that helps
Well for starters, there's no such file. So that's a clear indicator that it is a virus.
Start > Run type msconfig
Or just press windowskey and r and type in msconfig
Goto the startup tab and see if that file is located in there, if it is uncheck it and click apply. Then you are going to have to manually check your registry.
So to do this:
windowskey and r type regedit, navigate to this directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
See if there is a key there that relates to that file, if not there is another place you can check.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Personally I would do both
Also before you do that, I would remove the file, which was the path that you already mentioned
03-10-2011, 02:37 PM
#5
Scouse_Dom
League Champion
Originally posted by UP
Well for starters, there's no such file. So that's a clear indicator that it is a virus.
Start > Run type msconfig
Or just press windowskey and r and type in msconfig
Goto the startup tab and see if that file is located in there, if it is uncheck it and click apply. Then you are going to have to manually check your registry.
So to do this:
windowskey and r type regedit, navigate to this directory
See if there is a key there that relates to that file, if not there is another place you can check.
Personally I would do both
Also before you do that, I would remove the file, which was the path that you already mentioned
Start > Run type msconfig
Or just press windowskey and r and type in msconfig
Goto the startup tab and see if that file is located in there, if it is uncheck it and click apply. Then you are going to have to manually check your registry.
So to do this:
windowskey and r type regedit, navigate to this directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
See if there is a key there that relates to that file, if not there is another place you can check.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Personally I would do both
Also before you do that, I would remove the file, which was the path that you already mentioned
the files hidden and i cant see it
03-10-2011, 07:54 PM
#6
Oneup
Guest
Originally posted by Dom
the files hidden and i cant see it
Well you'll need to goto folder options:
From there goto the view tab
Click show hidden folders and files and also
uncheck hide protected operating system files.
You should go back and check it again later but this is just in case it's under the second level of being hidden
03-10-2011, 08:09 PM
#7
Scouse_Dom
League Champion
Originally posted by UP
Well you'll need to goto folder options:
From there goto the view tab
Click show hidden folders and files and also
uncheck hide protected operating system files.
You should go back and check it again later but this is just in case it's under the second level of being hidden
From there goto the view tab
Click show hidden folders and files and also
uncheck hide protected operating system files.
You should go back and check it again later but this is just in case it's under the second level of being hidden
its still not there
i cant find the file called hosts.exe
03-10-2011, 08:13 PM
#9
Scouse_Dom
League Champion
Originally posted by UP
Possible that it relocated, so just continue down the list of reg keys if you haven't and see if there are any entries
ive checked, everything seems normal :S
theres nothing suspicious tbh :S
i opened i so called "patcher" for virtual DJ pro and then this started happening, and after that my PC had a folder called "program data" created aswell :S
03-10-2011, 08:43 PM
#10
Oneup
Guest
Originally posted by Dom
ive checked, everything seems normal :S
theres nothing suspicious tbh :S
i opened i so called "patcher" for virtual DJ pro and then this started happening, and after that my PC had a folder called "program data" created aswell :S
theres nothing suspicious tbh :S
i opened i so called "patcher" for virtual DJ pro and then this started happening, and after that my PC had a folder called "program data" created aswell :S
Well that depends where that is located because windows does have a program data folder, it's a hidden folder so it's always been there
For instance:
You must login or register to view this content.
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
