# Super Virus
**URL:** https://forum.kirupa.com/t/super-virus/111056
**Category:** Uncategorized
**Created:** [May 22, 2004, 9:28pm UTC](https://forum.kirupa.com/t/super-virus/111056 "2004-05-22T21:28:02Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@NeoDreamer](https://forum.kirupa.com/u/NeoDreamer)
#### Post date: [May 22, 2004, 9:28pm UTC](https://forum.kirupa.com/t/super-virus/111056/1 "2004-05-22T21:28:02Z")
I have this crazy virus. There’s a program called WScript.exe that runs at startup and uses 90% of the CPU. It keeps on recreating in C:/WINNT/system32. It causes my computer to beep and click like none other. Luckily, I can “end task” it with my Windows 2000 task manager.
So, I was considering to buy Norton Anti-virus. I go to the official website. Seconds later, my browser closes automatically. Then I go to Amazon to try to buy it; browser closes again! Then my cousin suggests that I go to [Microsoft.com](http://Microsoft.com) and learn how to set up a firewall. You guessed it; the browser shuts down. I think that this virus scans the websites I go to and shuts it down if it finds anything that can be used to stop it.
I’m not kidding. Does anyone know what this is all about? I already ran Ad-aware and Spybot, but the virus still remains.
---
### Author:  [@system](https://forum.kirupa.com/u/system)
#### Post date: [May 25, 2004, 2:41am UTC](https://forum.kirupa.com/t/super-virus/111056/2 "2004-05-25T02:41:59Z")
I figured out how to open up windows xp in safe mode - except it freezes when I try and do that! (My virus senses are tingling) Anyway, I’ve discovered some suspicious entries in my startup thingy. they are:
HKEY\_LOCAL\_MACHINE\Software\MicroSoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL
HKEY\_LOCAL\_MACHINE\Software\MicroSoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI
HKEY\_LOCAL\_MACHINE\Software\MicroSoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS
HKEY\_LOCAL\_MACHINE\Software\MicroSoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI
yes, I know MAPI appeared twice. Now, I call them suspicious only because EasyCleaner 2.0 says that it is suspicious/to difficult to pinpoint.
---
### Author:  [@system](https://forum.kirupa.com/u/system)
#### Post date: [May 25, 2004, 9:22pm UTC](https://forum.kirupa.com/t/super-virus/111056/3 "2004-05-25T21:22:37Z")
I’ve discovered the source of the problems on my computer. A file called netdc. what a bastard that was.