Funny.exe trojan

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

This trojan attacked via MSN. I have isolated the virus but have been left
with a PC I can not log onto. XP boots OK and then displays the user logon
screen. Select a user - XP starts to load profile - stops - logs you off
saving the settings. This is also true in safe mode. In short I have a virus
free PC which I can not get onto.
Any ideas on how to bypass the user screen or other 'fix'.
 
Logon as a different account .

If that is a successful, rename the account profile you had problems with.
For example...

C:\Documents and Settings\lipman
to
C:\Documents and Settings\lipman.bak

Login to the account that had problems

A new profile will be created.

Copy the directories from the backup to the new one WITHOUT copying - NTUSER.DAT

For exmple...
C:\Documents and Settings\lipman.bak
to
C:\Documents and Settings\lipman

In addition...

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt297.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

Dave





Dave





| This trojan attacked via MSN. I have isolated the virus but have been left
| with a PC I can not log onto. XP boots OK and then displays the user logon
| screen. Select a user - XP starts to load profile - stops - logs you off
| saving the settings. This is also true in safe mode. In short I have a virus
| free PC which I can not get onto.
| Any ideas on how to bypass the user screen or other 'fix'.
 
The top two selling antivirus programs did'nt have any effect on stopping
this virus.
Yes they were running and yes they were up to date!
 
AlanR said:
The top two selling antivirus programs did'nt have any effect on stopping
this virus.
Yes they were running and yes they were up to date!
Click to expand...
I've had a few trojans, diallers etc slip through the net. I'm unsure
whether this is a trojan, it comes up as a worm, and any attempts to
find the exe on google don't describe the problem you're having, but
do fit your description of the msn thing

http://www.iamnotageek.com/a/funny.exe.php
 
Back
Top