Please Help with WINCFG.SCR Infection !

From: Reticulum (cathexis_at_erols.com)
Date: 07/27/03 

Date: Sun, 27 Jul 2003 17:00:24 GMT

Greetings,

             I hope this is the right group to ask for help. My ancient PC is
infected by WINCFG.SCR and removal as per on-line help available
at places like Symantec are not working.

             All instructions say to run Regedit -- it turns itself off whether
accessed by Run command or Explorer. The wincfg.scr file is plainly
visible in windows but neither Eraser nor BC Wipe will remove it. When
I go to run Regedit then regedit will appear for no more than 1 second
and then shut itself off. A search was made for any *.el-type file. One
was found and deleted (gnugo.el in a directory of Go-games I have).

            If there's anything "saving" me it is that my system is so ancient
and I use a dial-up and DONT save the password ( to control kid's access)
so as soon as I log off the Connection Screen will keep popping up. I was
hit by some trojan once before and this was the give-away I was infected.

System Info:

                   Pitiful P-166 running Win95 thru dial-up to Internet.
Agnitum Outpost Firewall that *appears* to be blocking. It lists WINCFG as
blocked but oddly it comes up under allowed as well despite multiple attempts
at rule setting. Also, AVG 6.0 Virus Scan which is seeing NADA despite updates
and re-tries.

        Please help me with this infection. It has stumped anything I can think
of to eliminate it.

                 Accept my Thank in Advance,

                                                     Andrew
    Reticulum

Remove "your.hat" when replying via e-mail

Relevant Pages

  • Re: start up/window pops up/ program files/msn
    ... Highlight the above in Regedit, click File, Export, and save to the ... Under the other run command I don't find that particular folder? ... but that's not the actual folder the path is trying to access. ... loads at Startup that isn't in quotes. ...
    (microsoft.public.windowsxp.general)
  • Re: Run, cmd not working
    ... what other trojans may be affecting my regedit / cmd prompts? ... the removal by editing the registry using ERD5.0 ... I get a command prompt window if I run "command"  (that is something new to ... What do you see when you run CMD? ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Run, cmd not working
    ... what other trojans may be affecting my regedit / cmd prompts? ... the removal by editing the registry using ERD5.0 ... I get a command prompt window if I run "command"  (that is something new to ... What do you see when you run CMD? ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Blocked startup of Msconfig, Norton etc
    ... What I needed to do to get the task manager and regedit back in normal mode ... >> I have installed all of the latest downloads from Symantec and Microsoft ... >> Now I still cannot access Msconfig, Regedit, Norton System or Antivirus, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Run, cmd not working
    ... what other trojans may be affecting my regedit / cmd prompts? ... the removal by editing the registry using ERD5.0 ... I get a command prompt window if I run "command"  (that is something new to ... What do you see when you run CMD? ...
    (microsoft.public.windowsxp.help_and_support)