Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsJob BoardISP NewsFAQsForumsToolsMapsAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Cleaning mom's machine remotely
 
Search Topic:
  Share Topic:
RSS topic:
 
Posting
toggle:
flat / full
normal / watch
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
kaspersky did not detect autorun virus but nod32 did!! »
« One down, many more to go - spyware scammer sued  
AuthorAll Replies

ccarlin

join:2000-12-28
Deerfield, IL

reply to ccarlin
Re: Cleaning mom's machine remotely

Well her antivirus picked it up eventually took a few days for the sig to get it. But the cure was worse then the disease it removed the file but left the entry in the registry in the userinit key. So now when she starts the machine it just logs on then logs back off again. So the only way to fix this is to edit the registry off-line. I tried a Hiren's Boot CD but just couldn't get the registry editor to load. So may next attempt will be getting her a BartPE cd with a registry editor on it.

My sister got the same virus (from my mom) and I was able to walk her thru booting to a linux boot cd and renaming the file and copying the userinit.exe to the virus file name and rebooted and cleaned up successfully.

I don't know much about the BartPE stuff but I am hoping if I build the CD from my machine (using my windows image) and send it to her she can use it on her machine. Can anyone confirm this?
to forum · permalink · · 2008-03-24 09:11:12 · Reply to this

zteardrop

join:2005-12-20
Brooklyn, NY
said by ccarlin See Profile :

Well her antivirus picked it up eventually took a few days for the sig to get it. But the cure was worse then the disease it removed the file but left the entry in the registry in the userinit key. So now when she starts the machine it just logs on then logs back off again.
Which antivirus is she using ?
to forum · permalink · · 2008-03-24 11:03:10 · Reply to this

ccarlin

join:2000-12-28
Deerfield, IL		 AVG Free Edition
to forum · permalink · · 2008-03-24 11:09:04 · Reply to this


EGeezer
Spring is here
Premium
join:2002-08-04
Central Ohio
·RoadRunner Cable
·AT&T CallVantage

reply to zteardrop
Just out of curiosity, what virus(es) did she pick up? I had a friend with a recent infection that his SAV didn't pick up, it turned out to be a dropper and a bot/rootkit. I recommended a scratch and reload.
--
Mayors of New York come from nowhere and go nowhere.
Wallace Sayre (apparently, so do governors... )
to forum · permalink · · 2008-03-24 11:21:17 · Reply to this
Forums » Up and Running » Security » Securitykaspersky did not detect autorun virus but nod32 did!! »
« One down, many more to go - spyware scammer sued  

Most commented news this week
· [176] East Coast Verizon Workers Authorize Strike
· [166] Is AT&T Hinting At Usage-Based Pricing This Fall?
· [149] Time Warner Cable Using Fine Print To Foist Caps On Customers
· [125] Is Broadband A Civil Right?
· [111] The Great Landline Exodus Continues
· [97] Update Your Browser, Dummy
· [83] Comcast Hit With Another Throttling Lawsuit
· [82] What's Your Favorite Newsgroup Provider?
· [80] Friday Open Thread
· [73] Google's Cerf: Baby Bells Act Like Tots Having Tantrums
Saturday, 26-Jul
02:03:05 		Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
8th year online! © 1999-2008 dslreports.com.
page compression OFF