Register :: Profile :: FAQ :: Search :: Memberlist :: Log in to check your private messages :: Links :: Chat Room :: Courthouse :: Log in
 
 
  We need to prune PMs please save any you want to keep over one month old - STeALtH  
disQworld Forum Index
The time now is 23-11-2008

disQworld Forum Index -> Anti-Virus & Security

locked out of admin

  Author    Thread Post new topic Reply to topic
craigworth
Junior Member




Joined: 31 Oct 2004
Posts: 40
Location: upstairs in the back room
locked out of admin

seem to have a problem with virus on laptop, got virus that has locked me out of admin ,task master all programs control panel, ran avg which took nearly 10 hours although found some threats still have problem, get popups telling me ive got a virus problem redirecting me to a site for virus softwear but if i go to download avg jumps in and worns that its a bad site, any ideas ?

cheers craig
_________________
unless you own it destroy within 24 hours

my refs
http://www.disqworld.net/forums/viewtopic.php?p=679650#679650

*** Discount on discs? Logon to DiskDepot with - username: disqworld password: diskdepot ***

Post 23-07-2008 
 craigworth is offline View user's profile Send private message  Reply with quote  
aktiv8
Guru



Gender: Gender:Male
Joined: 16 Jun 2005
Posts: 743
Location: Cardiff

if you boot in safe mode you should be able to access the admin account and run any anti-spyware software (e.g. spybot, superantispyware etc)

You using Vista or XP? What site is the malware redirecting you to - that will aid in the exact fix if you wish to do it manually.
_________________
>>> Aktiv8 <<<
-----------------------------------------------------------
No discs supplied!

*** Discount on discs? Logon to DiskDepot with - username: disqworld password: diskdepot ***

Post 24-07-2008 
 aktiv8 is offline View user's profile Send private message  Reply with quote  
craigworth
Junior Member




Joined: 31 Oct 2004
Posts: 40
Location: upstairs in the back room

on xp mate, get a popup telling me that i have a worm.win32.netbooster virus got three shotcuts up on desktop one is viruswebprotect2008 ill find out what others are
cheers craig
_________________
unless you own it destroy within 24 hours

my refs
http://www.disqworld.net/forums/viewtopic.php?p=679650#679650

*** Discount on discs? Logon to DiskDepot with - username: disqworld password: diskdepot ***

Post 24-07-2008 
 craigworth is offline View user's profile Send private message  Reply with quote  
aktiv8
Guru



Gender: Gender:Male
Joined: 16 Jun 2005
Posts: 743
Location: Cardiff

Ooo thats a nasty blighter...

Try this:

run Regsvr32 /u filename.dll

whre filename.dll is one of the following in turn

stream32a.dll
msvideo.dll
windivx.dll
websrc32.dll
mscfg32.dll
pdswin.dll
ecxwp.dll
pmspl.dll
vipextqtr.dll


Then serch for and delete these files (may have to do in safe mode)

run regedit and CTRL-F to find the following strings in turn

c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
62EA9201-8CC7-4199-AC30-7744F836322E
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
6A719349-BDF5-4268-9019-4ACA0C2562D2

and delete them

Otherwise, a few posts on different forums seems to suggest that Superantispyware gets rid of this bugger
_________________
>>> Aktiv8 <<<
-----------------------------------------------------------
No discs supplied!

*** Discount on discs? Logon to DiskDepot with - username: disqworld password: diskdepot ***

Post 24-07-2008 
 aktiv8 is offline View user's profile Send private message  Reply with quote  
craigworth
Junior Member




Joined: 31 Oct 2004
Posts: 40
Location: upstairs in the back room

cheers m8 ill give it a go

craig
_________________
unless you own it destroy within 24 hours

my refs
http://www.disqworld.net/forums/viewtopic.php?p=679650#679650

*** Discount on discs? Logon to DiskDepot with - username: disqworld password: diskdepot ***

Post 26-07-2008 
 craigworth is offline View user's profile Send private message  Reply with quote  
craigworth
Junior Member




Joined: 31 Oct 2004
Posts: 40
Location: upstairs in the back room

ran superanti spyware and it seems to have removed all popups etc but looks like its altered the registry so still keeping me out of control panel and oher progs not sure if im confidant enough to sort out them strings not really sure what im doing might have to get a bit of assistance

cheers anyway aktive 8

craig
_________________
unless you own it destroy within 24 hours

my refs
http://www.disqworld.net/forums/viewtopic.php?p=679650#679650

*** Discount on discs? Logon to DiskDepot with - username: disqworld password: diskdepot ***

Post 28-07-2008 
 craigworth is offline View user's profile Send private message  Reply with quote  
  Display posts from previous:      
Post new topic Reply to topic


Jump to:  


Last Thread | Next Thread  >

Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

 

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /usr/www/users/disq/forums/includes/page_tail.php on line 39

DVD News, Reviews & Hot Deals Powered by phpBB © 2001 phpBB Group