Please Help with WINCFG.SCR Infection !

From: Reticulum (cathexis_at_erols.com)
Date: 07/27/03


Date: Sun, 27 Jul 2003 17:00:24 GMT

Greetings,

             I hope this is the right group to ask for help. My ancient PC is
infected by WINCFG.SCR and removal as per on-line help available
at places like Symantec are not working.

             All instructions say to run Regedit -- it turns itself off whether
accessed by Run command or Explorer. The wincfg.scr file is plainly
visible in windows but neither Eraser nor BC Wipe will remove it. When
I go to run Regedit then regedit will appear for no more than 1 second
and then shut itself off. A search was made for any *.el-type file. One
was found and deleted (gnugo.el in a directory of Go-games I have).

            If there's anything "saving" me it is that my system is so ancient
and I use a dial-up and DONT save the password ( to control kid's access)
so as soon as I log off the Connection Screen will keep popping up. I was
hit by some trojan once before and this was the give-away I was infected.

System Info:

                   Pitiful P-166 running Win95 thru dial-up to Internet.
Agnitum Outpost Firewall that *appears* to be blocking. It lists WINCFG as
blocked but oddly it comes up under allowed as well despite multiple attempts
at rule setting. Also, AVG 6.0 Virus Scan which is seeing NADA despite updates
and re-tries.

        Please help me with this infection. It has stumped anything I can think
of to eliminate it.

                 Accept my Thank in Advance,

                                                     Andrew
    Reticulum

Remove "your.hat" when replying via e-mail



Relevant Pages

  • Re: Blocked startup of Msconfig, Norton etc
    ... What I needed to do to get the task manager and regedit back in normal mode ... >> I have installed all of the latest downloads from Symantec and Microsoft ... >> Now I still cannot access Msconfig, Regedit, Norton System or Antivirus, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Word utility (was Re: Ligatures)
    ... It's handy for running utilities like RegEdit or CMD, ... But I am an atypical Windows user, ... enterprise-level software development environments that I've never ... I will say that, as a devoted Linux bigot, the new Vista command shell ...
    (alt.usage.english)
  • Re: [F] Windowsprogramme ersetzen
    ... ich komme mit dem Explorer eigentlich recht gut ... mit geändertem Dateinamen) der REGEDIT (welch Witz da ich eben einen ... dies ist fürs einfache Suchen handlicher als Registrar). ...
    (microsoft.public.de.german.win98.allgemein)
  • Re: Restrictions Message - cannot allow access to my folders
    ... Click Start, Run and enter REGEDIT In Regedit go to one, or both, of the following Registry keys ... you can right click the Explorer subkey and select Export to create a backup of this particular Registry key and its values. ... Please contact your system administrator. ...
    (microsoft.public.windowsxp.general)
  • Re: 2 Times is a "charm"...HELP! :)
    ... I figured out how to modify a command line. ... followed your regedit advice...noticed I only had 3 command lines. ... >>> your shutdown issues. ...
    (microsoft.public.windowsxp.general)