Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251
cmd has been hijacked, any help?
cmd has been hijacked, any help?

cmd has been hijacked, any help?

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
cmd has been hijacked, any help? three legs 08-16-2005
Posted by =?Utf-8?B?dGhyZWUgbGVncw==?= on August 16, 2005, 4:57 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi

I believe I have a hijac/malware/trojan or other nasty lurking in my registry?

My WXP Pro PC will begin to start, a cmd prompt window will flash for a
split second with a message to shut down, and then it will shut down!

I have so far downloaded and run in safe mode bitdefender - rav antivirus -
ad-aaware - spybot - spyblaster - stinger - ccshredder - McAfee - Norton. All
have found file infections. I have even went into regedit to turn off system
restore points as I can not access this through the usual way and I am the
administrator for this computer.

If anyone can even identify this I would be most greatful.



Posted by David H. Lipman on August 16, 2005, 9:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| Hi
|
| I believe I have a hijac/malware/trojan or other nasty lurking in my registry?
|
| My WXP Pro PC will begin to start, a cmd prompt window will flash for a
| split second with a message to shut down, and then it will shut down!
|
| I have so far downloaded and run in safe mode bitdefender - rav antivirus -
| ad-aaware - spybot - spyblaster - stinger - ccshredder - McAfee - Norton. All
| have found file infections. I have even went into regedit to turn off system
| restore points as I can not access this through the usual way and I am the
| administrator for this computer.
|
| If anyone can even identify this I would be most greatful.
|

Please elaborate on the process.

Please execute; MSCONFIG.EXE and have it diabale some of the items that run at
startup.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?TUw=?= on August 16, 2005, 5:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I am also getting the same cmd AND a "CTA" prompt. Can you elaborate on how
to run MSCONFIGURE? thanks!

>
> | Hi
> |
> | I believe I have a hijac/malware/trojan or other nasty lurking in my
registry?
> |
> | My WXP Pro PC will begin to start, a cmd prompt window will flash for a
> | split second with a message to shut down, and then it will shut down!
> |
> | I have so far downloaded and run in safe mode bitdefender - rav antivirus -
> | ad-aaware - spybot - spyblaster - stinger - ccshredder - McAfee - Norton. All
> | have found file infections. I have even went into regedit to turn off system
> | restore points as I can not access this through the usual way and I am the
> | administrator for this computer.
> |
> | If anyone can even identify this I would be most greatful.
> |
>
> Please elaborate on the process.
>
> Please execute; MSCONFIG.EXE and have it diabale some of the items that run
at startup.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Posted by David H. Lipman on August 16, 2005, 6:14 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| I am also getting the same cmd AND a "CTA" prompt. Can you elaborate on how
| to run MSCONFIGURE? thanks!

It is MSCONFIG.EXE and on WinXP (and can be placed on Win2K) and when you you
run it you can
selectively disable items to be started upon a reboot.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Bigbruva on August 17, 2005, 9:40 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi ML

You can run the Microsoft System Configuration Utility by:

1) Clicking "Start" and selecting "Run..."
2) In the Run window typing "msconfig" and clicking the OK button.
3) This will start the utility you can then click the "Selective Startup"
option and untick all the boxes to get an minimal setup once you reboot so
you can do a scan without the malware loaded.
*Note: once you have finished you will need to run this utility again to
return the system to the normal boot mode.

Alternatively you can hit F8 at the black startup screen and select the Safe
Boot option from the start menu then do the scans from there.

I hope that helps and let us know how you get on.

BB


>I am also getting the same cmd AND a "CTA" prompt. Can you elaborate on
>how
> to run MSCONFIGURE? thanks!
>
>>
>> | Hi
>> |
>> | I believe I have a hijac/malware/trojan or other nasty lurking in my
>> registry?
>> |
>> | My WXP Pro PC will begin to start, a cmd prompt window will flash for a
>> | split second with a message to shut down, and then it will shut down!
>> |
>> | I have so far downloaded and run in safe mode bitdefender - rav
>> antivirus -
>> | ad-aaware - spybot - spyblaster - stinger - ccshredder - McAfee -
>> Norton. All
>> | have found file infections. I have even went into regedit to turn off
>> system
>> | restore points as I can not access this through the usual way and I am
>> the
>> | administrator for this computer.
>> |
>> | If anyone can even identify this I would be most greatful.
>> |
>>
>> Please elaborate on the process.
>>
>> Please execute; MSCONFIG.EXE and have it diabale some of the items that
>> run at startup.
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> http://www.ik-cs.com/got-a-virus.htm
>>
>>
>>



Similar ThreadsPosted
IE Hijacked? June 14, 2006, 7:07 am
think I may have been hijacked by a hacker... January 28, 2007, 3:05 pm
Desktop wallpaper hijacked March 7, 2006, 8:20 am
Help! Has my yahoo email been hijacked? February 1, 2007, 3:48 pm
Win2K logon hijacked. Repeating self-generating asterisks! August 26, 2006, 12:00 am

The site map in XML format XML site map

Contact Us | Privacy Policy