CL
asked on
Virus attack
Anyone come across .scr screensaver malware/trojanq this virus?
How can i clean it..
How can i clean it..
Anyone come across .scr screensaver malware/trojanq this virus?Impossible to tell by extension
Generally, an SCR is an application written with the appropriate methods to make it a screensaver. As per above some EXE can be renamed to SCR and will be triggered when the screensaver's settings trigger.
Malware writers leverage this by setting the screensaver to launch the malicious EXE.
Reading your subject suggests a file was attached. If you want to see what virus it is, instead submit it to
http://www.virustotal.com/
as clarified above by other experts, .SCR is just a filename extension for Windows Screensaver, which basically is an executable file in EXE format. technically, any EXE file can be renamed and loaded as a screensaver though the file is not intended to behave that way.
yes, traditionally .SCR file is a way for some virus to hide as the filename extension is not that sensitive for most average Windows end users. but technically the two things (SCR and virus) are not related at all.
if you are worried about having some virus hidden specifically in SCR files, you may scan them using any up-to-date anti-virus software, or remove any non-Microsoft SCR files especially those with an invalid Microsoft certificate.
yes, traditionally .SCR file is a way for some virus to hide as the filename extension is not that sensitive for most average Windows end users. but technically the two things (SCR and virus) are not related at all.
if you are worried about having some virus hidden specifically in SCR files, you may scan them using any up-to-date anti-virus software, or remove any non-Microsoft SCR files especially those with an invalid Microsoft certificate.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
boot the machine from a install disk and go to repair/command prompt
and then search and delete the file.