[triadtechtalk] Re: Is this a virus

  • From: "Juanita Kimble" <jkimble@xxxxxxxxxxx>
  • To: <triadtechtalk@xxxxxxxxxxxxx>
  • Date: Wed, 11 Feb 2004 10:58:20 -0600


  From: Cuffy10@xxxxxxx

    regfile\shell\open\command
  I just tried it in Google and got 1360 hits. You have a worm.

  
http://www.google.com/search?hl=en&ie=ISO-8859-1&q=regfile%5Cshell%5Copen%5Ccommand&btnG=Google+Search


  __________________________________________

  I D\L the tool, ran it. It put a word pad icon on my desk top. I opened it. 
It reads


  The default value of the registry key

  "SOFTWARE\Classes\regfile\shell\open\command"

  is set to "regedit.exe "%1"".

  W32.Swen.A@mm has not been found on your computer.



  That is what is there now. But AdAware still finds it as a possable threat. 
It reads
regfile\shell\open\command ""   I am scanning on custom.

  I searched for this file + AdAware. I only found a post from Richard at TTT 
archives. Richard do you still
find this file when you run AdAware?

  I feel like I did\do have the virus.

  Juanita





  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~






  ---
  Outgoing mail is certified Virus Free.
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.583 / Virus Database: 369 - Release Date: 2/10/04

JPEG image

Other related posts: