change system.ini

  • Thread starter Thread starter Ash
  • Start date Start date
A

Ash

recently my computer infected with the "w32.hllw.studd"
virus. Thanks to NAV I managed to find it quickly.
However, everytime I boot up my computer i get a message
saying that "Dust.exe" could not be found and that the
file may have been moved or renamed. So I looked on the
NAV website on how to remove this problem permanently.
Atfer reading the document I have to change my system.ini
file as the virus seems to have copied itself into there
somehow and as a result Dust.exe wants to be loaded up at
startup. The website suggests that there is a section in
the system.ini file that looks something like this:

shell = Explorer.exe dust.exe

however when I open my system.ini file i dont have that
section in it so how can I change the file?

thanks for any help

Ash
 
Ash said:
recently my computer infected with the "w32.hllw.studd"
virus. Thanks to NAV I managed to find it quickly.
However, everytime I boot up my computer i get a message
saying that "Dust.exe" could not be found and that the
file may have been moved or renamed. So I looked on the
NAV website on how to remove this problem permanently.
Atfer reading the document I have to change my system.ini
file as the virus seems to have copied itself into there
somehow and as a result Dust.exe wants to be loaded up at
startup. The website suggests that there is a section in
the system.ini file that looks something like this:

shell = Explorer.exe dust.exe

however when I open my system.ini file i dont have that
section in it so how can I change the file?

thanks for any help

It may or may not be there..

Start -> Run

msconfig

Look through those tabs to find out what is really going on.
 
I have looked through the System Config Utility that
appears when I type in msconfig in the run menu i dont
seem to see anything that refers to the dust.exe file as
the symantec website suggested.

Ash
 
The Symantec article is written more for 9x systems than Windows 2000/XP.
Click Start, Run and enter REGEDIT Go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Locate the Shell value in the right pane. It should read "explorer.exe"
or "Explorer.exe", without the quotes. Your's probably reads "explorer.exe
dust.exe". Right click the Shell value and select Modify. Change it so
that it only reads Explorer.exe
 
Thanks for your help, much obliged
ash
-----Original Message-----
The Symantec article is written more for 9x systems than Windows 2000/XP.
Click Start, Run and enter REGEDIT Go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Locate the Shell value in the right pane. It should read "explorer.exe"
or "Explorer.exe", without the quotes. Your's probably reads "explorer.exe
dust.exe". Right click the Shell value and select Modify. Change it so
that it only reads Explorer.exe

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.




.
 
Back
Top