Antivga.exe

vbimport
#1

was working on someones computer, came across this program. no idea what it does or is doing - tried to close it and it restarts itself instantly. im thinking it must be set to run in the shell, because it also re-adds itself to the msconfig startup list.

just wondering if anyone has seen it before. it was in c:/windows/system folder, which bothers me tenfold more. googling turns up nothing :(.

i still dont have consistent internet access, so any guesses between now and whenever i get back on are welcome.

#2

The only thing I can think of is what kind of monitor are you dealing with? Is it really old? I thought maybe looking at some information on VGA would help out, and I found this. It mentions that VGA uses analog signals rather than digital. Maybe that has something to do with it? Although, it does say monitors today support VGA… I tried a couple other search engines I know are pretty good, but couldn’t find anything, either. Hope this helps, or points in a good direction…

#3

Making a google search for anti vga (both terms together) comes up with this:

http://www.google.com.gr/search?as_q=&num=10&hl=el&ie=UTF-8&btnG=Αναζήτηση+στο+Google&as_epq=anti+vga&as_oq=&as_eq=&lr=&as_ft=i&as_filetype=&as_qdr=all&as_occt=any&as_dt=i&as_sitesearch=

Two of the enclosed links:

http://www.mapsym.co.uk/vga.htm
http://www.mapsym.co.uk/vga.htm

mention something like an anti vga virus but generally make no sense at least to me. Not that much help but it is a start. This is strange, keep us informed if you get more info.

#4

start-run-regedit

hkey_local_machine\software\microsoft\windows\currentversion\run
hkey_local_machine\software\microsoft\windows\currentversion\run-
hkey_local_machine\software\microsoft\windows\currentversion\runonce
hkey_local_machine\software\microsoft\windows\currentversion\runex
hkey_local_machine\software\microsoft\windows\currentversion\runservices
hkey_local_machine\software\microsoft\windows\currentversion\runservicesonce

if it aint there go to start-control panel -administrative tools - services
for nt
for 98 just these keys up^.
or start - accessories - system tools - system information - tools - system configuration utility.
since it is c:/windows folder i suspect it is some 95-98-98se-me windows?

“It mentions that VGA uses analog signals rather than digital.”
it still does even on tft.

#5

If it isn’t anything to do with the above processes, then it could be a trojan made by a ‘friend’ of the person.
In this case, you will have to delete the registry entry which causes it to open on startup, and scan with an antivirus program.