Re: virus, trojan, malware



From: "sgt mac" <sgtmac@xxxxxxxxxxxxxxxxxxxxxxxxx>

| Sorry, I failed to mention that the file is in my windows\system32 directory
| and my system32 directory is not visable. I was going to delete it from there
| but the directory does not show up.

| Further suggestions are welcome.


Open a Command Prompt (execute; cmd.exe)
enter the following commands ...

copy c:\windows\system32\fsrrecc.sys c:\
attrib -r -h -s c:\fsrrecc.sys
exit


Then ...
Please submit a sample to Virus Total --
http://www.virustotal.com/flash/index_en.html
When you get the report, please post back the exact results


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.



Relevant Pages

  • Re: AUTOEXEC.NT
    ... Go to start> run> cmd and click ok ... In command prompt, type in expand c:\i386\autoexec.nt_ ... > I looked in the SYSTEM32 directory, and there is no flie caled ...
    (microsoft.public.windowsxp.general)
  • Re: Problem with Xcopy
    ... I found the path for xcopy and it now ... the instruction is ... the system32 directory must be ... open a Command Prompt and type this command: ...
    (microsoft.public.windowsxp.general)
  • Re: Pagefile.sys MISSING!
    ... reports are correct (and I have no reason to doubt that they ... > 5) cacls: MyFile.txt displays the following information: ... >> f) What happens when you type these commands at the Command Prompt: ... >> Please report all screen output. ...
    (microsoft.public.windowsxp.general)
  • Re: Pagefile.sys MISSING!
    ... reports are correct (and I have no reason to doubt that they ... > 5) cacls: MyFile.txt displays the following information: ... >> f) What happens when you type these commands at the Command Prompt: ... >> Please report all screen output. ...
    (microsoft.public.windowsxp.general)
  • Re: NTFS Permissions report utility?
    ... "Walter Clayton" wrote in message ... > Fire up a command prompt on the server. ... >> Out file server at work is ancient, many of the directories having been ... I'd like to get a report of of permission>> on ...
    (microsoft.public.windows.file_system)