Safe Mode?

[dfgu]

I know there is no safe mode for windows nt 4.0 server. My big problem right now is that there is a virus that on my server renamed itself to command.exe. Symantec see's it at a Trojan horse, doesn't say which on it is. It cannot delete it because it's in the task manager processes. I have no idea how to get it out of the task manager. I tried ending the task, but it wont let me. And since there is no safe mode, I cannot delete it in safe mode. I tried looking in the registry for that "command.exe" file name to see when it would start up. But it's not in there at all.. Please help..

Thanks..

 

[yizhar]

HI.

There are several ways to get around the problem.

You can install another copy of NT4 on a different drive, install and updated anti virus on the second copy, then use it to clean the original one.

Similar to the above, you can connect the existing hard disk as secondary disk to an existing NT4/2000 install.

Or you can boot the computer using a W2K/XP setup CDROM, and then use the recovery console to delete/rename specific file(s).

If the C drive is with FAT then you can use DOS/Win9x to access it.

And there are other methods like boot disks.

Bye


Yizhar Hurwitz

http://teachers.sivan.co.il/yizhar