|

Jul 13, 2002, 09:39 PM
|
Veteran
|
|
Join Date: Dec 2001
Location: United Kingdom
Posts: 1,103
|
|
sponsored links
Ahhhh what have I been saying it could be bad trans if not dolly that also cresates kernel32.exe It may ebven be WORM_TENDOOLF.B that uses aol to spread
Last edited by uk_trader; Jul 13, 2002 at 09:44 PM.
|

Jul 13, 2002, 09:54 PM
|
Junior Member
|
|
Join Date: Aug 2001
Location: glendale, b.c., canada
Posts: 17
|
|
awesome thanks zack ill let ya know if it works or not.
stu.
|

Jul 13, 2002, 10:41 PM
|
Junior Member
|
|
Join Date: Aug 2001
Location: glendale, b.c., canada
Posts: 17
|
|
ok, first of all i did it, but all the files listed that it said to delete were not found, i did a search for each one of them and none of them except for kernal32.exe were found, and it wasnt in the folder that it was supposed to be in. also what is the key to get the start up menu to come up because ctrl doesnt seem to be working, anyone know? so i just restarted in ms-dos after i started up, is this ok or do i have to go directly from shut off to command prompt. one more thing it said that i would need to edit the autoexec.bat and take stuff out but there is nothing in autoexec.bat, and it said i would need to replace regedit.exe and msconfig.exe which i dont need to do seeig as theyre still on my computer.
stu.
|

Jul 14, 2002, 12:39 PM
|
Veteran
|
|
Join Date: Dec 2001
Location: United Kingdom
Posts: 1,103
|
|
Alot of viruses and trojans use files named kernel32.exe (I was sure this was lregit last night Duh  )WORM_TENDOOLF.A, WORM_TENDOOLF.B, Bad trans, and Dolly to name a few and seeing as you dont have any of the other files associated with Dolly looks like you dont have it. Have you done a virus and a trojan scan or did you just notice the prescence of kernel32.exe? If not do a scan.
Last edited by uk_trader; Jul 14, 2002 at 12:44 PM.
|

Jul 14, 2002, 12:52 PM
|
Junior Member
|
|
Join Date: Aug 2001
Location: glendale, b.c., canada
Posts: 17
|
|
i noticed it first in my startup items, but ive done a virus scan, all i found were some trojans named IRC_GNIME_TEMP1.INI, IRC_GNIME_TEMP2.INI,
IRC_GNIME_TEMP3.INI, or something close to that, i cant remember exactly, i didnt think at the time they might be related. but whats the key to get the start up selection to come up, because i think i may be able to fix it with that.
stu.
|

Jul 14, 2002, 01:06 PM
|
Veteran
|
|
Join Date: Dec 2001
Location: United Kingdom
Posts: 1,103
|
|
I think you mean what starts up and how to disable it yeah? Use the run command and type msconfig
Just reread your original post and you have already tried that so do you mean what processes are running? ctrl+alt+del has probably been disabled by the trojan/worm
You could use Trojan first aid kit that enables you to view all running processes and kill them (not permanent).
Last edited by uk_trader; Jul 14, 2002 at 01:10 PM.
|
Thread Tools |
|
Display Modes |
Linear Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 01:26 PM.
|
|