[Jess607]

Hi!! I have a huge trojan on my computer called win.exe. Is there a safe application which will removve this from my computer? I currently have mcaffe security but it did not remove it. It has infected my computer to the point where it shuts everything down and it will not let me access the itnernet or anything. Please help me.



Jessica

[Advertisements]

Can you boot to Safe Mode with Command Prompt?

Reboot and when you see the maker's logo, hear a beep or it talks about F8, start tapping the F8 key slowly. Keep tapping until the Safe Mode Menu appears and choose Safe Mode with Command Prompt or just Command Prompt. Login with your usual login. You will get a black screen with a prompt.

Type with an Enter after each line:

cd  \windows\system32

(prompt should change to show you are in C:\Windows\System32)

attrib  -r  -s  -h  win.exe

copy  win.exe  win.bad

copy  cmd.exe  win.exe

exit

(I use two spaces in the code box so you can see where 1 space goes.)

What this does is replace win.exe with cmd.exe which is just a black command window. Just cancel it when it comes up. Can you now get on the Internet?

Download OTL from
http://www.geekstogo...timers-list-it/
and Save it to your desktop.

Run OTL (Vista or Win 7 => right click and Run As Administrator)

select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them into your reply.


Ron

[RKinner]

Can you boot to Safe Mode with Command Prompt?

Reboot and when you see the maker's logo, hear a beep or it talks about F8, start tapping the F8 key slowly. Keep tapping until the Safe Mode Menu appears and choose Safe Mode with Command Prompt or just Command Prompt. Login with your usual login. You will get a black screen with a prompt.

Type with an Enter after each line:

cd  \windows\system32

(prompt should change to show you are in C:\Windows\System32)

attrib  -r  -s  -h  win.exe

copy  win.exe  win.bad

copy  cmd.exe  win.exe

exit

(I use two spaces in the code box so you can see where 1 space goes.)

What this does is replace win.exe with cmd.exe which is just a black command window. Just cancel it when it comes up. Can you now get on the Internet?

Download OTL from
http://www.geekstogo...timers-list-it/
and Save it to your desktop.

Run OTL (Vista or Win 7 => right click and Run As Administrator)

select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them into your reply.


Ron