c:\windows\system32\netdc.exe

[DDM]

Running Windows XP Home on a Dell Dimension Desktop, all critical updates
installed.

Recently, whenever I start Windows, right after I enter my password, I get a
warning beep. When the Welcome screen disappears, I see the following error
message on screen: "Windows cannot find the file
c:\windows\system32\netdc.exe."

I don't know what this file is, or why it is being called. I ran Webroot
Spysweeper and deleted all ad/spyware it found. Then I ran Norton Antivirus
and it found nothing. I checked my Startup group and it is empty. Ran
Msconfig and inspected my startup settings and all seems normal. I tried to
run System Restore to go back to a point before this started happening but
System Restore couldn't do it. Finally, I tried starting in Safe Mode. I
still get the error.

I looked at my other Dell Dimension, which has pretty much the same
configuration but is behaving normally, and there is no such file on it,
hidden or otherwise.

Other than my getting the error message, all seems normal. I'm having no
problems with the OS, or with running any software (primarily MS Office
2003). But it's annoying.

Does anyone have any idea what this is all about?

Thanks in advance.

 

[Will Denny]

Hi

Try these programs to check for any spyware that may be on your system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://www.spywareinfo.com/~merijn/downloads.html

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://mvps.org/winhelp2002/unwanted.htm
http://www.microsoft.com/security/articles/spyware.asp

Try the following link as well:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nibu.e.html

 

[Carey Frisch [MVP]]

Visit: http://it.trendmicro-europe.com/enterprise/security_info/ve_detail.php?VName=BKDR_CCT.A
for detailed instructions on removal of that malware file.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--------------------------------------------------------------------------------------


| Running Windows XP Home on a Dell Dimension Desktop, all critical updates
| installed.
|
| Recently, whenever I start Windows, right after I enter my password, I get a
| warning beep. When the Welcome screen disappears, I see the following error
| message on screen: "Windows cannot find the file
| c:\windows\system32\netdc.exe."
|
| I don't know what this file is, or why it is being called. I ran Webroot
| Spysweeper and deleted all ad/spyware it found. Then I ran Norton Antivirus
| and it found nothing. I checked my Startup group and it is empty. Ran
| Msconfig and inspected my startup settings and all seems normal. I tried to
| run System Restore to go back to a point before this started happening but
| System Restore couldn't do it. Finally, I tried starting in Safe Mode. I
| still get the error.
|
| I looked at my other Dell Dimension, which has pretty much the same
| configuration but is behaving normally, and there is no such file on it,
| hidden or otherwise.
|
| Other than my getting the error message, all seems normal. I'm having no
| problems with the OS, or with running any software (primarily MS Office
| 2003). But it's annoying.
|
| Does anyone have any idea what this is all about?
|
| Thanks in advance.
|
|

 

[Phil]

Netdc.exe is related to a virus. I just spent five hours this weekend trying
to remove it from relatives machine and I could not get rid of it. Nothing
touched it or if it did, it soon came back, sometimes as a differernt name,
like st.exe or netda.exe or netdb.exe. I could not figure out how to stop it
from reloading and found very little info on google or symantecs site about
it. See if this helps you(it didn't really help me, we eventually just
formatted and reinstalled). Sounds like you may have gotten rid of the
netdc.exe and now the references are just left, so maybe this will help.
FYI - I did get rid of the virus several times with anti-virus programs and
manually, but it kept coming back, not sure how. This computer had the a, b,
and c variants.
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nibu.e.html

 

[DDM]

Phil, Carey, Will:

I appreciate your taking the time to respond. Thank you all very much.

 

[Will Denny]

You're welcome.

 

[Phil]

You're welcome.

Phil, Carey, Will:

I appreciate your taking the time to respond. Thank you all very much.



http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nibu.e.html