richb2
Wooliewillie
join:2001-12-31
Montvale, NJ
| can't start running "I think my computer is.."
My other computer is down. I have removed it from the web. I have tried starting in safe mode, but it just sits there. When I boot into regular mode and log in, I get a message that TrojanHunter has failed, Kaspersky has failed, and a few other failures before it reboots by itself. How can I get to run "I think my computer is infected or hijacked. What should I do"? |
|
SnowyOne
Premium
join:2003-04-05
Kailua, HI | Knowing what OS would help. |
|
richb2
Wooliewillie
join:2001-12-31
Montvale, NJ | win2k |
|
richb2
Wooliewillie
join:2001-12-31
Montvale, NJ | when it startsmy realtime frisk says
c:\winnt\system32\wininet.dll is infected by an unknown virus.
previously it said c:\boot.sys is infected |
|
richb2
Wooliewillie
join:2001-12-31
Montvale, NJ | This is an emergency. I can't start fixing this PC since it is not bootable. Please help. |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
2 edits | reply to richb2
Sorry, I was forgetting you cannot boot. |
|
garys_2k
join:2004-05-07
Farmington, MI
 ·Future Nine Corpor..
·Vonage
| reply to richb2
Re: can't start running "I think my computer is..
said by richb2  :This is an emergency. I can't start fixing this PC since it is not bootable. Please help. You might have to nuke and rebuild. Get the hard drive off of it, set it to slave and put it in another computer to pull your important data files off. Don't pull ANY executables, any might be infected (worst case, root-kit'd).
You might scan it while it's a slave on the other PC, that might help get it bootable. |
|
SnowyOne
Premium
join:2003-04-05
Kailua, HI | reply to richb2
Re: can't start running "I think my computer is.."
I'd start here
»support.microsoft.com/default.as···s;315396 |
|
richb2
Wooliewillie
join:2001-12-31
Montvale, NJ
| well things are looking a little better. I managed to get into safe mode and ran Frisk, which deleted a few viruses but was unable to recognize one in system32/wininet.dll. Should I just manually delete this file (if I can)? The machine does have killbox on its hard-drive. When I try connecting to networking on this machine, strange things happen. |
|
jp10558
Premium
join:2005-06-24
Willseyville, NY | reply to richb2
AntiVir in safe mode seems to be very good (and free for personal use) for getting most viruses. |
|
richb2
Wooliewillie
join:2001-12-31
Montvale, NJ
| JP, the issue is that I can't connect this PC to the internet. I can't boot into regular mode at all. I can boot into safe mode but if I boot into safe mode with networking, it crashes. I am posting a HJT log for this machine under a new post as per instructs. |
|
jp10558
Premium
join:2005-06-24
Willseyville, NY | Yeah, just run AntiVir from a CD or USB key. |
|
Don Pelotas
join:2004-12-10 | reply to richb2
Try to use the free standalone DrWeb CureIt from a CD/USB:»ftp://ftp.drweb.com/pub/drweb/cureit/d···reit.exe |
|
Rusty Dusty
join:2002-11-23
| reply to richb2
I think that you will have to delete the corrupted
wininet.dll and replace it with one known good. I could
not delete it in safe mode either; had to use other tools.
An earlier reply suggested a reinstall. If your computer is infested, then OS security could remain compromised, even
after cleaning. Using 'Knoppix' or 'Bart's PE' could allow you to copy data or replace the '.dll' file; but do not copy any '.exe's...
Sometimes a wipe and reinstall is quicker and safer...
Another tool that has worked very well for me is to
build this CD:
»www.rescueme4win.org/UpdatePubli···irus.htm
Good luck. |
|
SnowyOne
Premium
join:2003-04-05
Kailua, HI
 ·RoadRunner Cable
 ·Clearwire Wireless
| I agree with that type of maintenance.
Here's a good outline thread.
»Emergency Repair Kit for your PC |
|
