Re: System.ini
- From: Malke <notreally@xxxxxxxxxxxxxxx>
- Date: Tue, 24 Jan 2006 04:46:31 -0800
newbie wrote:
> I was able to copy these file names with the help from spybot.,and
> enclosing them in case you don't want to open the earlier attachment.
> Not knowing about them I have temporarily disabled them.
> Please let me know what are these.
> Thanks & Regards
>
> Located: System.ini, crypt32chain (DISABLED)
> command: crypt32.dll
> file: crypt32.dll
>
> Located: System.ini, cryptnet (DISABLED)
> command: cryptnet.dll
> file: cryptnet.dll
>
> Located: System.ini, cscdll (DISABLED)
> command: cscdll.dll
> file: cscdll.dll
>
> Located: System.ini, ScCertProp (DISABLED)
> command: wlnotify.dll
> file: wlnotify.dll
>
> Located: System.ini, Schedule (DISABLED)
> command: wlnotify.dll
> file: wlnotify.dll
>
> Located: System.ini, sclgntfy (DISABLED)
> command: sclgntfy.dll
> file: sclgntfy.dll
>
> Located: System.ini, SensLogn (DISABLED)
> command: WlNotify.dll
> file: WlNotify.dll
>
> Located: System.ini, termsrv (DISABLED)
> command: wlnotify.dll
> file: wlnotify.dll
>
> Located: System.ini, wlballoon (DISABLED)
> command: wlnotify.dll
> file: wlnotify.dll
These are all legitimate Windows files, but they should not show up in
Startup or be disabled. I suggest that you run through these malware
removal steps systematically:
http://www.elephantboycomputers.com/page2.html#Removing_Malware
You may need to run HijackThis and post your log to one of the sites
listed at the link above (not here, please). If you don't have a
full-featured current version antivirus installed (not earlier than
2004) with an active subscription and updated virus definitions, start
by running either Sysclean or Dave Lipman's Multi-AV. More information
about that is available at the above link.
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.
- References:
- System.ini
- From: newbie
- Re: System.ini
- From: Phil Weldon
- Re: System.ini
- From: newbie
- System.ini
- Prev by Date: Re: a more in depth description
- Next by Date: Rootkit and WindowsMe
- Previous by thread: Re: System.ini
- Next by thread: Rootkit and WindowsMe
- Index(es):
Relevant Pages
|
