Trojan Gema

[Guest]

These are the Files that are Effected with Trojan.Gema Virus on December 18, 2003
C:\WINDOWS\system32\dskcompat.exe
C:\Program Files\Internet Explorer\iexplorer.exe
C:\Documents and Settings\McGuire Family\Local Settings\Temp\sda547.EXE

I followed the Norton rules but my computer is still looking for dskcompat.exe when XP starts up. Any help?
Thank You
TheNav20

 

[Ronnie Vernon MVP]

These are the Files that are Effected with Trojan.Gema Virus on
December 18, 2003 C:\WINDOWS\system32\dskcompat.exe
C:\Program Files\Internet Explorer\iexplorer.exe
C:\Documents and Settings\McGuire Family\Local
Settings\Temp\sda547.EXE

I followed the Norton rules but my computer is still looking for
dskcompat.exe when XP starts up. Any help? Thank You
TheNav20

NAV can be a bit sloppy when it removes some settings that a virus makes.

Open Start/Run and type: msconfig and press OK. Click the Start Up tab.

Look for a reference to the file "dskcompat.exe" and remove the check mark
from that entry. Note what the path points to for that entry. Reboot.

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User
Please reply to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

 

[Guest]

----- Ronnie Vernon MVP wrote: -----

These are the Files that are Effected with Trojan.Gema Virus on
December 18, 2003 C:\WINDOWS\system32\dskcompat.exe
C:\Program Files\Internet Explorer\iexplorer.exe
C:\Documents and Settings\McGuire Family\Local
Settings\Temp\sda547.EXE
dskcompat.exe when XP starts up. Any help? Thank You
TheNav20

NAV can be a bit sloppy when it removes some settings that a virus makes.

Open Start/Run and type: msconfig and press OK. Click the Start Up tab.

Look for a reference to the file "dskcompat.exe" and remove the check mark
from that entry. Note what the path points to for that entry. Reboot.

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User
Please reply to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

 

[Guest]

NAV can be a bit sloppy when it removes some settings that a virus makes.

Open Start/Run and type: msconfig and press OK. Click the Start Up tab.

Look for a reference to the file "dskcompat.exe" and remove the check mark
from that entry. Note what the path points to for that entry. Reboot.

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User
Please reply to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

thenavigator20
C:\WINDOWS\system32\dskcompat.exe path points to for that entry is SOFTWARE\Microsft\Windows\CurrentVersion\Run
Thank you
Sincerely

 

[Ronnie Vernon MVP]

C:\WINDOWS\system32\dskcompat.exe path points to for that entry is
SOFTWARE\Microsft\Windows\CurrentVersion\Run Thank you
Sincerely

You can open regedit and navigate to:

HKEY_LOCAL_MACHINE\Software\Microsft\Windows\CurrentVersion\Run

Click on the Run key and look for that file path value there. Right click
that value and select Delete.

--
Ronnie Vernon
Microsoft MVP-Windows Shell/User
Please reply to the newsgroup so all may benefit.
http://www.dts-l.org
http://www.mvps.org

 

[Guest]

Ok, per Ronnie's instructions, I went into msconfig and deleted the check mark, but when I rebooted, it asked if I always wanted to now start my computer in Diagnostic or normal mode. When I chose normal, the check box went back. Do I choose the Diagnostic mode and always start my computer that way from now on?

 

[Guest]

See my previous message above please. I FIXED IT!!!!!!!!!!!!!!!!!!!! I saw the path that it was pointing to, in the start up box, went there, deleted it and now the message is gone!!!!!!!!!!!!!!!!!!! Ronnie-thank you and thank you to Nav20 for posting the question!!!! I've been trying to fix this pop up message for days!!!!

 

[Ronnie Vernon MVP]

See my previous message above please. I FIXED IT!!!!!!!!!!!!!!!!!!!!
I saw the path that it was pointing to, in the start up box, went
there, deleted it and now the message is gone!!!!!!!!!!!!!!!!!!!
Ronnie-thank you and thank you to Nav20 for posting the question!!!!
I've been trying to fix this pop up message for days!!!!

Cindy

Glad you got this problem sorted. Enjoy the computing.

--
Ronnie Vernon
Microsoft MVP-Windows Shell/User

Please reply to the newsgroup so all may benefit.
http://www.dts-l.org
http://www.mvps.org

 

[Andrew Talbot]

have you tried putting a check in the box that say's do not start at start
up or open this window again?

I have tried the fixes in this thread ans so far they have not worked for

me. I am running WIN XP. I tried the msconfig method and kept getting the
pop-up that I had chaged the start settings (same as someone else in the
thread posted). I then deleted the entry from the registry and have rebooted
twice but I am still getting the pop-up box upong retart that I have chaged
the way windows starts up. The only way I have found to get rid of it is go
back to the default settings at which time it says that the file is missing
again. Please help.