S
sorrybi
I got an executable that messes around with my computer.
When it's on, it won't let IE start, or Norton Anti-Virus,
or msconfig.exe or the Task Manager, maybe some more stuff.
The norton doesn't recognize it as a virus or anything, it
lets it run anytime.
To get it out of my system for the next few start ups, I
open Notepad, I write something in it, I choose to Restart
my computer, and when Notepad asks me if I want to save
the file, I choose Cancel, so it won't shut windows down
and restart.
The executable is shut down and I can work like I used
too, all alright.
Then I delete the file from all the places it's in:
1. "C:\WINDOWS\"
2. "C:\WINDOWS\System32\"
The problem is, that after a few restarts, the file comes
back, and again, Norton doesn't operate, IE, mscongif,
Task manager, all disabled.
The file is called "cnf upd.exe", it starts up with
windows.
I don't know what brought the file into my computer, but
something did.
It's not placed in the Start Up directory, but when I look
at the Registery Editor, I can find it and delete it, in
serveral places:
1. Key name "HKEY_USERS\S-1-5-21-527237240-1708537768-
1060284298-1003
\Software\Microsoft\Windows\CurrentVersion\Runonce" with
the name "UpdateComponent" and the value "CNF UPD.EXE".
2. Key name "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared
Tools\MSConfig\startupreg\UpdateComponent" with the
name "command" and the value "CNF UPD.EXE" (more names and
values there include (name - value) "hkey" -
"HKLM", "inmapping" - "0", "item" - "CNF UPD", "key" -
"SOFTWARE\Microsoft\Windows\CurrentVersion\Run".
And I also use msconfig.exe to get it out of my start up.
And it always comes back.
What can I do about it?
When it's on, it won't let IE start, or Norton Anti-Virus,
or msconfig.exe or the Task Manager, maybe some more stuff.
The norton doesn't recognize it as a virus or anything, it
lets it run anytime.
To get it out of my system for the next few start ups, I
open Notepad, I write something in it, I choose to Restart
my computer, and when Notepad asks me if I want to save
the file, I choose Cancel, so it won't shut windows down
and restart.
The executable is shut down and I can work like I used
too, all alright.
Then I delete the file from all the places it's in:
1. "C:\WINDOWS\"
2. "C:\WINDOWS\System32\"
The problem is, that after a few restarts, the file comes
back, and again, Norton doesn't operate, IE, mscongif,
Task manager, all disabled.
The file is called "cnf upd.exe", it starts up with
windows.
I don't know what brought the file into my computer, but
something did.
It's not placed in the Start Up directory, but when I look
at the Registery Editor, I can find it and delete it, in
serveral places:
1. Key name "HKEY_USERS\S-1-5-21-527237240-1708537768-
1060284298-1003
\Software\Microsoft\Windows\CurrentVersion\Runonce" with
the name "UpdateComponent" and the value "CNF UPD.EXE".
2. Key name "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared
Tools\MSConfig\startupreg\UpdateComponent" with the
name "command" and the value "CNF UPD.EXE" (more names and
values there include (name - value) "hkey" -
"HKLM", "inmapping" - "0", "item" - "CNF UPD", "key" -
"SOFTWARE\Microsoft\Windows\CurrentVersion\Run".
And I also use msconfig.exe to get it out of my start up.
And it always comes back.
What can I do about it?