Avatar of CL
CL
Flag for Malaysia asked on

Virus attack

Anyone come across .scr screensaver malware/trojanq this virus?

How can i clean it..
Windows Server 2008

Avatar of undefined
Last Comment
CL

8/22/2022 - Mon
David Johnson, CD

.scr is a renamed .exe that is normally used by screen savers
boot the machine from a install disk and go to repair/command prompt
and then search and delete the file.
Shaun Vermaak

Anyone come across .scr screensaver malware/trojanq this virus?
Impossible to tell by extension

Generally, an SCR is an application written with the appropriate methods to make it a screensaver. As per above some EXE can be renamed to SCR and will be triggered when the screensaver's settings trigger.

Malware writers leverage this by setting the screensaver to launch the malicious EXE.

Reading your subject suggests a file was attached. If you want to see what virus it is, instead submit it to
http://www.virustotal.com/
virustotal.png
bbao

as clarified above by other experts, .SCR is just a filename extension for Windows Screensaver, which basically is an executable file in EXE format. technically, any EXE file can be renamed and loaded as a screensaver though the file is not intended to behave that way.

yes, traditionally .SCR file is a way for some virus to hide as the filename extension is not that sensitive for most average Windows end users. but technically the two things (SCR and virus) are not related at all.

if you are worried about having some virus hidden specifically in SCR files, you may scan them using any up-to-date anti-virus software, or remove any non-Microsoft SCR files especially those with an invalid Microsoft certificate.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ASKER CERTIFIED SOLUTION
CL

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.