Cheat Engine

Konata Izumi · Posted: Sat Jun 12, 2010 5:25 pm Post subject: Virus?

So I have two utorrent.exe's that open at startup. When I try to end them they say access is denied. My utorrent is not supposed to run at startup. When I right click them and open file location it opens the desktop and when I select properties it opens the system32 properties. Everything comes up clean on hijackthis and nod32 finds nothing. I am running mbam as I post this. Heres a screenshot, the one with the name set as utorrent is the one that I know is real. Should I worry?

Fafaffy · Cheater Reputation: 65 Joined: 12 Dec 2007 Posts: 28

Yeah, its most likely a virus.
Make sure to have UAC disabled and be able to view hidden files and system files, then check your desktop for uTorrent and delete it.

Cryoma · Posted: Sat Jun 12, 2010 10:57 pm Post subject:

Yes, you should be worried.
Get a startup manager and uncheck the other two.

Phox · Posted: Sat Jun 12, 2010 11:51 pm Post subject:

Put all your crap on a flash drive, and wipe your disk. That's what I always do when I get anything that even remotely looks like a virus.

GG · Posted: Sun Jun 13, 2010 1:50 am Post subject:

Uzeil · Moderator Reputation: 6 Joined: 21 Oct 2006 Posts: 2411

Or just do this to find out if it's a virus:
Delete uTorrent. Either go Add/Remove programs and uninstall if it's listed there, or just delete the uTorrent.exe

Both will work. Then restart, see if the uTorrent.exe's you're seeing here still load. If they do, you've got yourself a virus. If you think they aren't the most clever virus writers on the planet, you can just search for uTorrent.exe and delete all you find until you can restart and it's not there. Another good place to find them or what's opening them can be going in your registry and looking for any /Run or /RunOnce directory(there are only two. The actual best way to find the /Run's is to search for /RunOnce then look at the /Run that should be right above it) That or use msconfig(I honestly have no idea how well msconfig does this)

However, without doing the first thing I said, don't just assume they're viruses and kill them. Many applications will run little variants of themselves that do different tasks for them, allowing them to do multiple things without 1) Being caught by hackers, or 2) Completely crashing whenever one of their sub-processes crash.

For all you know, these are extremely important, so make sure it's not a virus first. (Like I said, just delete uTorrent, restart, see if they're still there)

DURAN · Posted: Sun Jun 13, 2010 5:58 am Post subject:

Hero · Posted: Sun Jun 13, 2010 11:14 am Post subject:

Open task manager> find process> right click> Open location.

Figure out where that bitch is son.

bfsdbsdfbdsfb · Posted: Sun Jun 13, 2010 11:38 am Post subject:

or you know windows button + R -> MSCONFIG -> Startup -> Uncheck µtorrent

elpacco · Posted: Sun Jun 13, 2010 11:56 am Post subject:

Konata Izumi · Posted: Mon Jun 14, 2010 2:34 am Post subject:

Never mind, It was a utorrent session that crashed and hung up.

1929394839292057839194958 · Posted: Mon Jun 14, 2010 4:41 am Post subject:

GG · Posted: Mon Jun 14, 2010 5:33 am Post subject:

SFP+ · Posted: Mon Jun 14, 2010 5:45 am Post subject:

elpacco · Posted: Mon Jun 14, 2010 7:34 am Post subject: