Re: nt authority system
From: lozliz (lozliz_at_discussions.microsoft.com)
Date: 01/20/05
- Next message: Cdpierson5: "RE: Cannot Remove Spyware Files Running"
- Previous message: Steve Clark [MSFT]: "Re: IPSec to encrypt SMB traffic?"
- In reply to: David H. Lipman: "Re: nt authority system"
- Next in thread: David H. Lipman: "Re: nt authority system"
- Reply: David H. Lipman: "Re: nt authority system"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 20 Jan 2005 11:45:04 -0800
David,
i have follwed points 1-3 below; however have stumbled at point 4.
How do you reboot the computer into safe mode.
Also once i run the various programmes how do i know what to delete and what
not to delete ?
Any advice would be appreciated.
thanks
lozliz
"David H. Lipman" wrote:
> That means you are infected with non-viral malware. It is a self preservation scheme that
> when you execute Adaware, the malware will shutdown the PC such that you don't get a chance
> to remove it. I think that is pretty smart and I have run accross it a couple of times it
> is certainly PITA !
>
> However, you CAN overcome this self preservation attempt.
>
> When you execute Adaware and you get the shutdown message, go to..
>
> Start --> run
> and type
>
> shutdown -a
>
> then hit the enter key. That should stop the shutdown sequence and allow you to clean the
> system. The following is a set of instructions I suggest to help make that cleaning process
> be effective as possible. Ignore the section about downloading Adaware unless you don't
> have Adaware SE v1.05.
>
> 1) Download the following three items...
>
> Trend Sysclean Package
> http://www.trendmicro.com/download/dcs.asp
>
> Latest Trend Pattern File.
> http://www.trendmicro.com/download/pattern.asp
>
> Adaware SE (free personal version v1.05)
> http://www.lavasoftusa.com/
>
> Create a directory.
> On drive "C:\"
> (e.g., "c:\New Folder")
> or the desktop
> (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
>
> Download Sysclean.com and place it in that directory.
> Download the Trend Pattern File by obtaining the ZIP file.
> For example; lpt345.zip
>
> Extract the contents of the ZIP file and place the contents in the same directory as
> sysclean.com.
>
> 2) Update Adaware with the latest definitions.
> 3) Disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> 4) Reboot your PC into Safe Mode and shutdown as many applications as possible
> 5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
> platform and clean/delete any infectors/parasites found.
> (a few cycles may be needed)
> 6) Restart your PC and perform a "final" Full Scan of your platform using both the
> Trend Sysclean utility and Adaware
> 7) Re-enable System Restore and re-apply any System Restore preferences,
> (e.g. HD space to use suggested 400 ~ 600MB),
> 8) Reboot your PC.
> 9) Create a new Restore point
>
>
> * * * Please report your results ! * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
>
>
>
>
> "lozliz" <lozliz@discussions.microsoft.com> wrote in message
> news:13E99000-CD2D-4619-8735-471A3CD41AFE@microsoft.com...
> | I have installed lavasoft adware. Wwhen I run for the first time the
> | computer then shuts down, which has been authorised by NT authority system.
> | The actual error message is:
> | WINDOWS MUST NOW RESTART BECAUSE THE DCOM SERVER PROCESS LAUNCHER SERVICE
> | TERMINATED UNEXPECTEDLY.
> |
> | Everthing else appears to be okay.
>
>
>
- Next message: Cdpierson5: "RE: Cannot Remove Spyware Files Running"
- Previous message: Steve Clark [MSFT]: "Re: IPSec to encrypt SMB traffic?"
- In reply to: David H. Lipman: "Re: nt authority system"
- Next in thread: David H. Lipman: "Re: nt authority system"
- Reply: David H. Lipman: "Re: nt authority system"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
