wincfg.scr

S

Sean

Hi,

I found something nasy waiting for me last night when I booted
up....it is a backdoor trojan called wincfg.scr.

I tried everything, ran Norton, it said it fixed the file. But, I
still can't run regedit or taskmanager in regular mode. They'll run
in safe mode.

I removed all references to wincfg.scr from my registry, but my system
still seems to be affected by this.

Please, if you can, answer two questions (the 2nd being much more
imprtant to me than the first...):

1. What is this thing doing to my system
2. How do I get back to normal?


Many thanks!
sean

*************************************
Order Cigarettes On-Line and Save $$$

All Major Brands $3 a pack or less.
Shipped to your door in 3-5 days!!!

http://www.newyorkcigs.com
 
S

Sean

You are so close! Re run in safe mode and follow what IMM (Senior
Member) at (07-26-2003 06:29 AM) about half way down in the forum
recommends.
Hint:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce

By the way, your Forte Agent is way out of date.

Wow....I think that did it.....OK...I can now run RegEdit, and Task
Manager and MSConfig. Last problem left is I can't turn on NAV.

It's telling me I need to be an administrator. I tried using both
control panel and the uninstall option to uninstal NAV and was
planning on reinstalling, but I can't get it to uninstall because it
keeps telling me I need to be an admin.

Any ideas?

BTW, I OWE YOU BIG-TIME!!!!

Thank you!

sean

*************************************
Order Cigarettes On-Line and Save $$$

All Major Brands $3 a pack or less.
Shipped to your door in 3-5 days!!!

http://www.newyorkcigs.com
 
Y

YK

Sean said:
To Clarify, I can run a scan in NAV, but I can't enable auto-protect,
or set up my NOrton Internet Security Firewall....

thanks
sean

I don't run any Norton product due to its resources requirements so can't
help with this.

Try reading the whole topic in that forum or asking a question there. Last
entry was asking about this.
 
H

Hannibal

YK wrote:

I don't run any Norton product due to its resources requirements so can't
help with this.

Try reading the whole topic in that forum or asking a question there. Last
entry was asking about this.

I've tried searching for "norton" and "symantec" in my newsgroup
listings and come up dry. Please let me know what the name of the
Norton AV newsgroup is so I can ask my ISP to add it.

Hannibal
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top