Funny.exe trojan

[Guest]

This trojan attacked via MSN. I have isolated the virus but have been left
with a PC I can not log onto. XP boots OK and then displays the user logon
screen. Select a user - XP starts to load profile - stops - logs you off
saving the settings. This is also true in safe mode. In short I have a virus
free PC which I can not get onto.
Any ideas on how to bypass the user screen or other 'fix'.

 

[Guest]

Sorry to learn you apparently did not take prudent security precautions by
using a good antivirus program. It is likely you'll now need to perform a
"clean install" of Windows XP.

Clean Install Windows XP
http://michaelstevenstech.com/cleanxpinstall.html

 

[David H. Lipman]

Logon as a different account .

If that is a successful, rename the account profile you had problems with.
For example...

C:\Documents and Settings\lipman
to
C:\Documents and Settings\lipman.bak

Login to the account that had problems

A new profile will be created.

Copy the directories from the backup to the new one WITHOUT copying - NTUSER.DAT

For exmple...
C:\Documents and Settings\lipman.bak
to
C:\Documents and Settings\lipman

In addition...

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt297.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

Dave





Dave





| This trojan attacked via MSN. I have isolated the virus but have been left
| with a PC I can not log onto. XP boots OK and then displays the user logon
| screen. Select a user - XP starts to load profile - stops - logs you off
| saving the settings. This is also true in safe mode. In short I have a virus
| free PC which I can not get onto.
| Any ideas on how to bypass the user screen or other 'fix'.

 

[Guest]

The top two selling antivirus programs did'nt have any effect on stopping
this virus.
Yes they were running and yes they were up to date!

 

[Paul Heslop]

The top two selling antivirus programs did'nt have any effect on stopping
this virus.
Yes they were running and yes they were up to date!

I've had a few trojans, diallers etc slip through the net. I'm unsure
whether this is a trojan, it comes up as a worm, and any attempts to
find the exe on google don't describe the problem you're having, but
do fit your description of the msn thing

http://www.iamnotageek.com/a/funny.exe.php