Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic of your own. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!
Virus got me BAD! [RESOLVED], Virus changed my file extensions
Dinofish
post Sep 9 2005, 07:55 AM
Post #1


Member
**
Posts: 39
OS: XP SP2
Hi,

After reading and doing all the "do before you post", I thought I had it licked. But in the end, it got me BAD! When the virus originally kicked in, my Ad-ware log got filled and I noticed that all .exe, .lnk, .pif and .reg would only open it notepad. With some help from the internet I download some file that gave me some control back. I then restored my registry and everything seemed ok until I reboot. Same thing kept happening. In the end I disabled system restore, ran Ewido, enabled system restore an rebooted. Everything came up fine excluding Ad-ware. When I activated the program, the virus came back. I restored my registry, uninstalled Ad-ware, disabled system restore, ran Ewido, enabled system restore and rebooted. My problem now is that I can not get in. As soon as the XP screen appears it kicks me back to the screen where I can choose safe mode, or last know command or normal boot. None of these work. I can't get in! Can you help me???
Go to the top of the page
 
+Quote Post
 
 Start new topic
Replies
Dinofish
post Sep 25 2005, 07:50 AM
Post #2


Member
**
Posts: 39
OS: XP SP2
The line has been added.
The Autoexec.bat file is empty. What does that mean?
Go to the top of the page
 
+Quote Post

Posts in this topic
- Dinofish   Virus got me BAD! [RESOLVED]   Sep 9 2005, 07:55 AM
- - Metallica   Please follow the procedure here: http://www.geeks...   Sep 15 2005, 12:58 PM
- - Dinofish   Hello, Thank you for helping me. When I purchase...   Sep 15 2005, 02:07 PM
- - Metallica   Can you remember if a file called userinit or mayb...   Sep 16 2005, 11:53 AM
- - Dinofish   I do not remember seeing those files. I have also...   Sep 16 2005, 12:46 PM
- - Metallica   Oh. That was good thinking. Can you check on t...   Sep 16 2005, 01:02 PM
- - Dinofish   Hi, Thanks for your help. Yes, they are both in ...   Sep 16 2005, 01:45 PM
- - Metallica   OK. Then it probably is the registry that has the ...   Sep 16 2005, 02:19 PM
- - Dinofish   System.log file does not exist in c:\windows...   Sep 16 2005, 05:16 PM
- - Metallica   Ugh. That doesn't make it any easier. Can ...   Sep 18 2005, 03:09 AM
- - Dinofish   Hello, Yes, there is a system.log file (1 kb in...   Sep 18 2005, 08:27 PM
- - Metallica   If you rename the .log file to .txt it will not be...   Sep 19 2005, 11:38 AM
- - Dinofish   Here you go...   Sep 19 2005, 05:41 PM
- - Metallica   Nothing wrong with that. Can you do the same for ...   Sep 20 2005, 11:43 AM
- - Dinofish   Hi Attached if the ntuser.dat.log from the Repa...   Sep 20 2005, 08:02 PM
- - Metallica   OK. That looks usefull. Rename Systemprofile_NTUS...   Sep 21 2005, 01:28 PM
- - Dinofish   Ok, thanks. I'll try that tonite when I get h...   Sep 22 2005, 12:08 PM
- - Metallica   Keep me posted.   Sep 22 2005, 12:31 PM
- - Dinofish   I did what you said but was not able to log in; sa...   Sep 22 2005, 08:25 PM
- - Metallica   Can you see if you have this file: c:\windows...   Sep 23 2005, 08:31 AM
- - Dinofish   I searched my entire C drive. This file does not e...   Sep 23 2005, 10:11 AM
- - Metallica   Which files are there in the Repair folder? Regar...   Sep 23 2005, 12:03 PM
- - Dinofish   I answered that one in a previous post. "This...   Sep 23 2005, 10:05 PM
- - Metallica   There should be more yes, but maybe we can manipul...   Sep 24 2005, 05:24 AM
- - Dinofish   Here you go...   Sep 24 2005, 12:15 PM
- - Metallica   Can you add this line machine\software\m...   Sep 25 2005, 04:35 AM
|- - Metallica   QUOTE(Dinofish @ Sep 25 2005, 03:50 PM)The li...   Sep 25 2005, 09:09 AM
- - Dinofish   I tried rebooting but no such luck. Do you think ...   Sep 25 2005, 07:52 PM
- - Metallica   The problem is that rebuilding the regsitry from t...   Sep 26 2005, 12:02 PM
- - Dinofish   I have seen that with XP Pro but not on the Home E...   Sep 26 2005, 12:08 PM
- - Metallica   But you did have System Restore enabled on that co...   Sep 26 2005, 12:27 PM
- - Dinofish   Yes system restore was enabled. Back in my first p...   Sep 26 2005, 12:54 PM
- - Metallica   Is the program you used called AdAware? Hoping you...   Sep 26 2005, 01:06 PM
- - Dinofish   I un-installed Lavasoft Ad-aware program, so I won...   Sep 26 2005, 02:41 PM
- - Dinofish   All Ad-Aware programs including backups have been ...   Sep 26 2005, 06:46 PM
- - Dinofish   Last night I think I narrowed my boot up problem t...   Sep 27 2005, 11:48 AM
- - Dinofish   Last night I think I narrowed my boot up problem t...   Sep 27 2005, 12:27 PM
- - Dinofish   Sorry 'bout the double post... I'll be ...   Sep 27 2005, 12:30 PM
- - Metallica   No problem. I'll have to ask if the option yo...   Sep 27 2005, 12:39 PM
- - Metallica   Answer from one of our "supertechs" ...   Sep 28 2005, 12:41 PM
- - Dinofish   I have already tried this. The problem is I do not...   Sep 28 2005, 02:14 PM
- - Metallica   One of the Trusted Techs said we should have repla...   Sep 29 2005, 12:20 PM
- - Dinofish   I would replaced all 5 if I had them. So are you ...   Sep 29 2005, 12:33 PM
- - Metallica   Let's wait for a few more suggestions from the...   Sep 29 2005, 12:55 PM
- - Dinofish   I've got an idea Because I have backups of...   Sep 30 2005, 08:33 PM
- - Metallica   Is that a full backup of the registry? Regards,   Oct 1 2005, 05:51 AM
- - Dinofish   I checked it out. It contains the 5 hives plus the...   Oct 1 2005, 03:59 PM
- - Metallica   I think so, but we have to figure out a way to act...   Oct 2 2005, 06:21 AM
- - Dinofish   I tried what you asked and it did not work. The au...   Oct 3 2005, 01:02 PM
|- - Metallica   QUOTE(Dinofish @ Oct 3 2005, 09:02 PM)Have yo...   Oct 3 2005, 01:21 PM
- - Metallica   QUOTE(darth_ash @ Oct 4 2005, 01:39 AM)I just...   Oct 4 2005, 12:16 PM
- - Dinofish   I'll give it another try and try to boot into ...   Oct 4 2005, 12:51 PM
- - Dinofish   It failed again and again. The repair folder is mi...   Oct 5 2005, 05:44 AM
- - darth_ash   Hi Dinofish, The hives in the repair folder are th...   Oct 5 2005, 03:41 PM
- - Dinofish   Hello Darth Ash, To be exact I installed XP Pr...   Oct 5 2005, 04:00 PM
- - Dinofish   Darth Ash, I was successful getting into safemode...   Oct 6 2005, 11:27 AM
- - Dinofish   Great news!! I got in. By upgrading to Pro...   Oct 10 2005, 06:39 PM
- - Metallica   Excellent job. Thanks for your assistance darth_as...   Oct 11 2005, 11:34 AM
- - Metallica   Before you follow the instructions below, make sur...   Oct 11 2005, 11:37 AM
- - Dinofish   I did as you asked. Here is my Hijackthis file. ...   Oct 12 2005, 04:30 AM
- - Metallica   I don't think so. They are quite common and I ...   Oct 12 2005, 11:56 AM
- - Dinofish   I guess not if everything looks good. (Though I ha...   Oct 12 2005, 12:12 PM
- - Metallica   Since this issue appears to be resolved ... this T...   Oct 12 2005, 12:31 PM

 

Closed TopicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 
RSS Time is now: 22nd March 2010 - 01:53 AM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.

© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy | Advertising
Powered By IP.Board © 2010  IPS, Inc.