Link to home
Start Free TrialLog in
Avatar of CL
CLFlag for Malaysia

asked on

Virus attack

Anyone come across .scr screensaver malware/trojanq this virus?

How can i clean it..
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

.scr is a renamed .exe that is normally used by screen savers
boot the machine from a install disk and go to repair/command prompt
and then search and delete the file.
Anyone come across .scr screensaver malware/trojanq this virus?
Impossible to tell by extension

Generally, an SCR is an application written with the appropriate methods to make it a screensaver. As per above some EXE can be renamed to SCR and will be triggered when the screensaver's settings trigger.

Malware writers leverage this by setting the screensaver to launch the malicious EXE.

Reading your subject suggests a file was attached. If you want to see what virus it is, instead submit it to
http://www.virustotal.com/
User generated image
as clarified above by other experts, .SCR is just a filename extension for Windows Screensaver, which basically is an executable file in EXE format. technically, any EXE file can be renamed and loaded as a screensaver though the file is not intended to behave that way.

yes, traditionally .SCR file is a way for some virus to hide as the filename extension is not that sensitive for most average Windows end users. but technically the two things (SCR and virus) are not related at all.

if you are worried about having some virus hidden specifically in SCR files, you may scan them using any up-to-date anti-virus software, or remove any non-Microsoft SCR files especially those with an invalid Microsoft certificate.
ASKER CERTIFIED SOLUTION
Avatar of CL
CL
Flag of Malaysia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial