W32/Backdoor.KPI

W32/Backdoor.KPI
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
W32/Backdoor.KPI antioch 05-25-2006
Posted by antioch on May 26, 2006, 4:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Antioch wrote, in part:


>
> Ease up on the caffeine B^)
>
> Phil Weldon
>
My doctor keeps telling me to do that ;-) ;-)
I had a small brandy as well - I was shaking so much when I switched the
computer back on.
Still seems OK.
Antioch




Posted by David H. Lipman on May 26, 2006, 4:11 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

|
>> Antioch wrote, in part:
|
>> Ease up on the caffeine B^)
>>
>> Phil Weldon
>>
| My doctor keeps telling me to do that ;-) ;-)
| I had a small brandy as well - I was shaking so much when I switched the
| computer back on.
| Still seems OK.
| Antioch
|

Hey... I live off of the caffeine in tea ! { The good British type, Twining :-)
}

The command was SFC /scannnow

You can open a Command Prompt and type; sfc /?
for the SFC command's syntax.

And yes the location in the Registry was to be changed to; c:\

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by antioch on May 26, 2006, 5:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>
> |
>>> Antioch wrote, in part:
> |
>>> Ease up on the caffeine B^)
>>>
>>> Phil Weldon
>>>
> | My doctor keeps telling me to do that ;-) ;-)
> | I had a small brandy as well - I was shaking so much when I switched the
> | computer back on.
> | Still seems OK.
> | Antioch
> |
>
> Hey... I live off of the caffeine in tea ! { The good British type,
> Twining :-) }
>
> The command was SFC /scannnow
>
> You can open a Command Prompt and type; sfc /?
> for the SFC command's syntax.
>
> And yes the location in the Registry was to be changed to; c:\
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
Hello David
The computer started up OK in the morning but on reading through your advice
again, but a couple of times it would not shut down. I did wonder if I had
done the very last bit correctly.
I have been doing scans etc all day as per your past recommendations and
that of others.
Nothing found apart from a couple of open ports which Symantec always finds.
It took some minutes to download all the bits in that i386 folder, yet when
I hit OK after inserting in Run sfc.exe, there was a flash on the desktop
and that was it. Does that seem right. Should I have put something
different into Run.
Also, I was not too sure what you meant by '....to the 'root' of the C
drive.
Rgds
Antioch



Posted by David H. Lipman on May 26, 2006, 5:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


| Hello David
| The computer started up OK in the morning but on reading through your advice
| again, but a couple of times it would not shut down. I did wonder if I had
| done the very last bit correctly.
| I have been doing scans etc all day as per your past recommendations and
| that of others.
| Nothing found apart from a couple of open ports which Symantec always finds.
| It took some minutes to download all the bits in that i386 folder, yet when
| I hit OK after inserting in Run sfc.exe, there was a flash on the desktop
| and that was it. Does that seem right. Should I have put something
| different into Run.
| Also, I was not too sure what you meant by '....to the 'root' of the C
| drive.
| Rgds
| Antioch
|

The "root" of the "C:" drive is the lowest part. The root. The base. The
moniker; c:\
means the root of C:.

Like I said, the command is; SFC /scannow and is best entered in a command
prompt but
doesn't have to be.

As the switch /scannow infers, it will cause teh OS to "scan" the systems to
make sure EXE
and DLL files are the right version.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by antioch on May 26, 2006, 5:53 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>
>
> | Hello David
> | The computer started up OK in the morning but on reading through your
> advice
> | again, but a couple of times it would not shut down. I did wonder if I
> had
> | done the very last bit correctly.
> | I have been doing scans etc all day as per your past recommendations and
> | that of others.
> | Nothing found apart from a couple of open ports which Symantec always
> finds.
> | It took some minutes to download all the bits in that i386 folder, yet
> when
> | I hit OK after inserting in Run sfc.exe, there was a flash on the
> desktop
> | and that was it. Does that seem right. Should I have put something
> | different into Run.
> | Also, I was not too sure what you meant by '....to the 'root' of the C
> | drive.
> | Rgds
> | Antioch
> |
>
> The "root" of the "C:" drive is the lowest part. The root. The base.
> The moniker; c:\
> means the root of C:.
>
> Like I said, the command is; SFC /scannow and is best entered in a
> command prompt but
> doesn't have to be.
>
> As the switch /scannow infers, it will cause teh OS to "scan" the systems
> to make sure EXE
> and DLL files are the right version.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
Then I did it wrong and there has been no scan etc.
So just dragging and drop of the i386 folder into the C drive, as opened via
My Computer/Local C along with the folders for Progs, Windows etc.
So I better do a proper entry in run. Is that a space bet SFC & /scannow.
Sorry to keep asking.
Antioch




The site map in XML format XML site map

Contact Us | Privacy Policy