John said:
Still getting the following message when windows shuts
down, I run Hyjackthis, adaware, and disk scan. Tried to
delete Ipconfigs.exe but get message they are system files
they are located in I386 and windows/system32 directories:
Ipconfigs.exe Initialization Failed
Ipconfigs.exe with an s is not part of the system - ipconfig.exe without
one is.
To get rid of the one with an s you can rename it with a different
extension, reboot so it does not get found. And see what complains
about not finding it. It may however be a different spyware that starts
by running a different program and then renames a file to this. If it
shows up again after rename/reboot, that is what will be happening. I
suggest next stage would be the VX2 plugin at
www.lavasoftusa.com for
AdAware, and CWShredder (no longer updated unfortunately) which is
linked at
www.aumha.org/a/quickfix.htm
If it is the one without an s, it ought not to be running (it is a
'DOS' style command to be run in the Command Prompt). Start - Run -
MSConfig.exe and see if there is a line loading it - if so, uncheck the
line. Exit - do not bother to reboot, but next time you do there will
be a message about 'System Configuration'. Check the 'Do not show
again' box and exit
You can also check in a run of regedit.exe to see if it has been set up
as a shutdown item, at
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Group Policy\State\Machine\Scripts\Shutdown
in a sub key - delete the sub key if you find it
