Spy Ware

[Guest]

A few weeks ago some spyware ate thru my firewall and updated spyware and
Anti virus protection and downloded itself into my computer. After much sweat
and more money spent on more spyware protection (which did remove the
spyware) I got my computer mostly fixed, Except now my computer does not
recognize any programs that are 16 bit base, including the ones already
installed.Every time I place a that was from win 98, 2000 ... I recieve this
message;
16 BIT WINDOWS SUBSYSTEM
C:\windows\system32\autoexec.nt.
THE SYSTEM FILE IS NOT SUITABLE FOR RUNNING MS-DOS AND
MICROSOFT WINDOWS APPLICATIONS. CHOOSE "CLOSE" TO TERMINATE THE
APPLICATION.

Any way I can fix this without having to slick my HD and reload Windows XP
again ?? Any help would be appreciated. Thanks MMI

 

[David H. Lipman]

AUTOEXEC.NT Fix Method 1:
copy; c:\windows\repair\autoexec.nt
to
c:\windows\system32


AUTOEXEC.NT FIX Method 2:
Go to; Start --> Run
enter; cmd.exe

{ assuming the WinXP CDROM disk is in drive "D:" }
In the Command Prompt enter...
expand D:\i386\autoexec.nt_ %windir%\system32\autoexec.nt


Since you indicated it WAS based upon malware, please perform the following !

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt367.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




|
| A few weeks ago some spyware ate thru my firewall and updated spyware and
| Anti virus protection and downloded itself into my computer. After much sweat
| and more money spent on more spyware protection (which did remove the
| spyware) I got my computer mostly fixed, Except now my computer does not
| recognize any programs that are 16 bit base, including the ones already
| installed.Every time I place a that was from win 98, 2000 ... I recieve this
| message;
| 16 BIT WINDOWS SUBSYSTEM
| C:\windows\system32\autoexec.nt.
| THE SYSTEM FILE IS NOT SUITABLE FOR RUNNING MS-DOS AND
| MICROSOFT WINDOWS APPLICATIONS. CHOOSE "CLOSE" TO TERMINATE THE
| APPLICATION.
|
| Any way I can fix this without having to slick my HD and reload Windows XP
| again ?? Any help would be appreciated. Thanks MMI

 

[Rock]

A few weeks ago some spyware ate thru my firewall and updated spyware and
Anti virus protection and downloded itself into my computer. After much sweat
and more money spent on more spyware protection (which did remove the
spyware) I got my computer mostly fixed, Except now my computer does not
recognize any programs that are 16 bit base, including the ones already
installed.Every time I place a that was from win 98, 2000 ... I recieve this
message;
16 BIT WINDOWS SUBSYSTEM
C:\windows\system32\autoexec.nt.
THE SYSTEM FILE IS NOT SUITABLE FOR RUNNING MS-DOS AND
MICROSOFT WINDOWS APPLICATIONS. CHOOSE "CLOSE" TO TERMINATE THE
APPLICATION.

Any way I can fix this without having to slick my HD and reload Windows XP
again ?? Any help would be appreciated. Thanks MMI

Error message when you install or start an MS-DOS or 16-bit
Windows-based program
http://support.microsoft.com/?id=324767

Also can be caused by a Trojan installing a file windupdater.exe and
creating registry entries for that file.
http://groups.google.com/[email protected]

AVAST (free antivirus software) can be the cause if SP2 is installed:
http://groups.google.com/[email protected]

You can put back the standard version of autoexec.nt by copying a backup
copy held in windows\repair to windows\system32.