Guest Zaperking Posted January 16, 2005 Share Posted January 16, 2005 (edited) . Edited August 14, 2006 by Zaperking Link to comment Share on other sites More sharing options...
this-is-me Posted January 16, 2005 Share Posted January 16, 2005 Press F8 while booting to go into safemode. Go to start > run and type in msconfig. Remove the offending entry. After that, boot normally. Who else would I be? Link to comment Share on other sites More sharing options...
Guest Zaperking Posted January 16, 2005 Share Posted January 16, 2005 (edited) . Edited August 14, 2006 by Zaperking Link to comment Share on other sites More sharing options...
this-is-me Posted January 16, 2005 Share Posted January 16, 2005 You can use something called BartPE, but it is a little much to go through just to get one file removed. I would suggest you boot to an XP recovery console, try to find the offending file and rename it. Who else would I be? Link to comment Share on other sites More sharing options...
Guest Zaperking Posted January 17, 2005 Share Posted January 17, 2005 (edited) . Edited August 14, 2006 by Zaperking Link to comment Share on other sites More sharing options...
b14ck Posted January 17, 2005 Share Posted January 17, 2005 I feel kind of bad for you if you can't figure out how to stop a malicious au3 script. Just be happy that it wasn't a fulll out trojan. -I am the giver of life and the bringer of death. Link to comment Share on other sites More sharing options...
Guest Zaperking Posted January 17, 2005 Share Posted January 17, 2005 (edited) . Edited August 14, 2006 by Zaperking Link to comment Share on other sites More sharing options...
layer Posted January 17, 2005 Share Posted January 17, 2005 (edited) did you get an AIM virus too? because my bro had an AIM virus a while ago, disabled msconfig... regedit too... then his computer started running slower and slower by the minute, he got like 378237582 pop ups when going to ANY site, thanks to me, i fixed it but then some guy he knows ran a virus scan and got rid of some trojans EDIT: who gave this file to you anyways? Edited January 17, 2005 by layer FootbaG Link to comment Share on other sites More sharing options...
Administrators Jon Posted January 17, 2005 Administrators Share Posted January 17, 2005 If you PM me the exe I can show the source which might enable to to undo the damage. But if its the same one that was posted a while ago it replaced various explorer related files both in system32 and the file protection cache. Nasty. Deployment Blog:Â https://www.autoitconsulting.com/site/blog/ SCCM SDK Programming:Â https://www.autoitconsulting.com/site/sccm-sdk/ Link to comment Share on other sites More sharing options...
Guest Zaperking Posted January 17, 2005 Share Posted January 17, 2005 (edited) . Edited August 14, 2006 by Zaperking Link to comment Share on other sites More sharing options...
Guest Zaperking Posted January 17, 2005 Share Posted January 17, 2005 (edited) . Edited August 14, 2006 by Zaperking Link to comment Share on other sites More sharing options...
Guest Zaperking Posted January 17, 2005 Share Posted January 17, 2005 (edited) . Edited August 14, 2006 by Zaperking Link to comment Share on other sites More sharing options...
phillip123adams Posted January 17, 2005 Share Posted January 17, 2005 Damn, I need help. It attatched itself to msn browser and when I went on it, the whole thing happened again. I got rid of it in safemode command prompt but it always deleting regedit and its disabled my group policy so I can't do system restore or anything! Is there some kind of program which stops AutoIt scripts? Is there some kind of anti-spyware or anti autoit avaliable?<{POST_SNAPBACK}>See reply from Jon earlier this morning. Phillip Link to comment Share on other sites More sharing options...
this-is-me Posted January 17, 2005 Share Posted January 17, 2005 You also need to do a Windows Repair. Boot to the winxp cd and select install windows. It will tell you that windows is already installed and allow you to repair that install. Then you will probably be good to go. Who else would I be? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now