Recent content by 413345

Definitely not the Gruel, no C:\rundll at all... I was able to make a windows repair installation with the supplied operating system CD. Am going to make a copy of necessary documents, then format the harddisk and install Linux. Adios trojans! Still would like to have been able to identify...

SO: is there any way of copying files to removable drive without starting up windows XP?

No, my NIS is supplied by my ADSL supplier, downloaded only. Removing the drive could be a problem: it is a laptop...

I run a windows XP, and it seems impossible to enter MS DOS without entering windows first. I desperately need to back up some files on the disk (copy them to a removable device), but as I am completely unable to start windows (it hangs up no matter what kind of mode I attempt to start it in), I...

Oh, and now I can't start up windows at all, not even in safe mode. I am seriously infected here, with no backup of important documents.... How can I make a backup of documents from DOS only?

Thanks for the correction concerning the explorer.exe in the systems folder, turns out it is the correct location after all. As for the hijack log, I have gone over this time and time again, and there is nothing suspicious about it at all, everything ok there. The win.ini, sys.ini and...

Hmm, no it doesn't appear to be the Bube at all, I have no change in the win.ini file nor any of the listed registries... The worm is certainly attempting to download something when I try to access the web, but I get a message that the download of files failed... So I am 100% I got the...

also found wintime.exe which is the dowloader.harnig virus, but I don't think that would have caused all the troubles I have outlined above, would it?

Hi thanks for your reply. Can run commands by your suggestion or by pressing windows key+r but I don't have xp pro, so no tasklist. I did however find out that I have a explorer.exe running in the windows\system32 directory, which it shouldnt. It has not altered any shell entries in the...

have become infected with a truly elaborate trojan which has performed the following on my system, starting with a windows error message: "Registry restored. One of the files containing the systems register data, had to be restored"... 1. Norton Internet Security is nothing but a blank screen...

thanks will give it a go and reply about the results tomorrow!

host file has nothing besides 127.0.0.1 have tried spybot,etc...

thanks for your reply mate, but have done and failed miserably :) avg did not detect any virus...

Thanks again... The host file hasn't been changed since 2003 so I think it is ok... also, in reference to the virus you suggested, there is no winupd.exe file on my harddisk afaik...

In the registry I found a nodrivetypeautorun entry in the HKCU register may this be of help to identify the bleep?