Re: Please Help with WINCFG.SCR Infection !

From: Reticulum (cathexis_at_erols.com)
Date: 07/30/03 

Date: Tue, 29 Jul 2003 22:31:20 GMT

  Andrew,

        WINCFG.SCR is DEAD !!
Thanks Man.

              If you'd like the specifics,....
Reboot to Safe Mode caused error screen for "Registry Problem" and suggested
restore --
"Okay" pressed and rebooted to normal mode, No change noted in problem.
Rebooted back into Safe Mode without error message.
 Regedit then would come up.
Followed path to trojan ref in registry as posted many places on internet
(Can re-post that here if you'd like). Deleted relevant refs.
*** NOTE: Also found ref. to "WINKEET" a known trojan I'd thought I'd killed
last year. Deleted same.
Rebooted to normal mode, regedit works fine, no more Connection Screen pop-ups
(see my original post)
No further signs of WINCFG.SCR activity on Outpost Firewall.

So I guess that's it!

One more question;

             Using "Find" under Regedit to search for refs. to wincfg I still
come up with two. I won't give whole path unless you want but they
boil down to - ,.../explorer/Doc Find Spec MRU and also RunOnce.
Are these harmless refs. to my own Find searches or should they also
be killed ??

             Again -- My Hearty Thanks,

                                                  Andrew

    Reticulum

Remove "your.hat" when replying via e-mail

Relevant Pages

  • Re: Please-- help me with uninstall and reinstall of video drivers
    ... into normal mode, and was working on the glitches... ... the arrow.I will reboot into safe mode again... ... I'm using my laptop now, and I will try to uninstall both ... Remove them both then reboot. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: W32.Sober.x is killing me
    ... >FireWall to allow it to download the needed AV vendor related files. ... >This will bring up the initial menu of choices and should be executed in Normal Mode. ... Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (alt.comp.anti-virus)
  • Re: Windows Trojan
    ... And I clicked for reboot the computer. ... My PC restart instead of running in safe mode. ... > FireWall to allow it to download the needed AV vendor related files. ... > This will bring up the initial menu of choices and should be executed in Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: Is my XP box affected by DDOS virus?
    ... | basically my browsers will work for a few minutes after reboot and then ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.security.virus)
  • RE: Blue screen of death
    ... if u need any help post new thread and ill get bk ... > and then it reboot the machine again. ... > I can boot my machine in safe mode but not in normal mode. ...
    (microsoft.public.windowsxp.basics)