Posted on 12/23/2011 11:13:55 AM PST by GeronL
I have kind of done this before. I have been working to delete a virus all morning on this borrowed computer. I think I have succeeded in the main.
The problem is the virus did cause some problems. Some exe files will not execute. It is probably a registry value that has been changed.
This is a BORROWED computer. I was using it when it apparently got infected. So I have a duty to fix this.
It an an EEPC netbook running Windows XP.
So the registry value at exe in the command line should be what?
SO how do I get access to the registry since Regedit an exe file?
Get a copy of this it is free burn it to a disc as an iso works on windows or linux systems. It will run as an OS so windows does not boot you can find and delete the virus then.
I will try to remember that but in this particular case its a netbook without a disc drive
I cannot reinstall Panda.
i will try to make sure the Windows Firewall is down because apparently I can’t turn off Panda.
I am pretty sure the virus is gone. I need to repair the network map/ drive thing
Thanks for #96
It sounds very very familiar!!
The difference is this machine is XP Profesional
Is it as simple as figuring out how/what to name the Network Map folder?
The virus is gone now I need to fix the damage it caused, this thing doesn’t want to go online
uInternet Connection Wizard,ShellNext = hxxp://127.0.0.1:1105/Intro/init.html
TCP: DhcpNameServer = 192.168.1.1
where do those numbers go??
I had the same problem a week or so ago... try this site:
http://filext.com/faq/broken_exe_association.php
Don’t know what point you’re at with all the advice been thrown at you. I visited a forum where the virus was placed in a banner ad (Java exploit). It mimicked my AVG panel and while I thought I quarantined it, I actually loaded it. Once I got rid of the virus I wasn’t able to run and .exe file. I got regedit.exe to run by copying it to regedit.com.
I am going to try a utility to fix that, it also makes a registry backup just in case.
Trying a Microsoft Fixit Utility and restarting......
if not there is a winsock repair utility that might work... maybe not?
First, go to the Security tab. Scroll over to the Restricted Sites Icon and click on it. Click the Sites box beneath it to make sure that your ISP wasn't added to the Restricted Sites.
Next check Dial Up and Virtual Private Network Settings. You most likely don't need this so delete all. Scroll down to the LAN settings box. Unless you use a proxy server then uncheck every box.
Last resort is to Delete the Local Area Connection and try to set up a new connection. Make sure you have your original ISP password before doing that as you'll need to add it again. I've thrown out both before, and it took a couple of tries adding connections to get it to work.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.