Home / Software / Computer viruses and spyware / Virus Drowor D. Trojan plus other Infestation
0 Members and 3 Guests are viewing this topic. « previous next »
Pages: 1 [2]  All - (Bottom) Print
Author Topic: Virus Drowor D. Trojan plus other Infestation  (Read 2086 times)
evilfantasy
Malware Removal Specialist
Moderator
Genius



Thanked: 462
Posts: 11,769

Experience: Beginner
OS: Windows 7


Calm like a bomb

evilfantasy's blog
« Reply #15 on: November 28, 2007, 03:47:15 AM »

Run CWShredder first CWShredder It works with Win ME. It looks for variants of the  CoolWebSearch trojan which overwrites Windows system files like rundll32.exe

Then go to Merjin.org and download the zip file for rundll32.exe

Extract the zip into C:Windows\

That should get your control panel back.
IP logged

CBMatt
Mod & Malware Specialist
Prodigy



Thanked: 160
Posts: 6,033

Experience: Experienced
OS: Windows 7


Sad and lonely...and loving every minute of it.

1
« Reply #16 on: November 28, 2007, 05:13:27 AM »

Tried your suggestion re smitfraudfix but found wouldnt run - went back to download page and says for O/s WinXP / 2000 so appears not to be functional for Win Me.
Right you are.  Sorry 'bout that.  With all of the threads going on, it can be easy to sometimes lose track of who's using what OS.  Heh.

Exact wording denying control panel access is :
"Windows cannot find C:/WINDOWS/rundll32.exe.  You may have typed the name incorrectly in the Run dialog. or another open program cannot find a systemfile. To search for a file, click the Start button and then click Search"
The location sounds a bit iffy to me, but I suppose it could just be how ME is set up.  I've used this particular OS for a whole 2 hours in my life, so I wouldn't know.  In any case, go ahead and try evilfantasy's suggestion and see how that works for you.

(please note as an aside; the forward slash in above string should be a backslash. - might sound daft but I cant find the backslash key on the laptop I am using (not the affected machine) as it is set up for communication with the UK using £ instead of hash with digit 3, this in turn has changed backslash key to the hash with no trace anywhere now of backslash function. This doesnt matter other than your reading of the string above).
On some UK keyboards, the backslash is to the left of the Z.  I've also seen it to the left of the 1.  If you're interested, here's a list of common keyboard layouts in different countries...
http://en.wikipedia.org/wiki/Keyboard_layout

Do you need a new HJT scan report or not? Looks as if system clear now
We shouldn't need to see it again, but I wasn't the one analyzing it for you, so it's not my decision.
IP logged

Quote
An undefined problem has an infinite number of solutions.
—Robert A. Humphrey

Actually, the name's Chris...
Aussie
Guest
« Reply #17 on: November 29, 2007, 07:05:47 PM »

Hi Evil & CB,

Evil, I ran CWShredder - all clear.  All other scans are now clear also. Downloaded/installed new rundll32, all control panel functions restored. Closed/cleared all old Restore functions, rebooted, and reset new clean restore point.
Nice work Evil - very appreciative of your advice/support and hanging in with me on this. Top marks sport.

CB, Thanks your watching eye also. Info on keyboard info appreciated.

I think we can close this now guys.  Well Done. Thanks

Aussie
IP logged
evilfantasy
Malware Removal Specialist
Moderator
Genius



Thanked: 462
Posts: 11,769

Experience: Beginner
OS: Windows 7


Calm like a bomb

evilfantasy's blog
« Reply #18 on: November 29, 2007, 07:23:35 PM »

Good to hear!!!

Safe surfing.....
IP logged

CBMatt
Mod & Malware Specialist
Prodigy



Thanked: 160
Posts: 6,033

Experience: Experienced
OS: Windows 7


Sad and lonely...and loving every minute of it.

1
« Reply #19 on: November 30, 2007, 07:44:32 AM »

Awesome, I'm glad to hear it.    You may want to stop by GetJava and get the latest version of Java available, as it has a lot of important security features that you're missing out on.
IP logged

Quote
An undefined problem has an infinite number of solutions.
—Robert A. Humphrey

Actually, the name's Chris...
Pages: 1 [2]  All - (Top) Print 
Home / Software / Computer viruses and spyware / Virus Drowor D. Trojan plus other Infestation « previous next »
 


Login with username, password and session length

Old Forum Search | Forum Rules
Copyright © 2010 Computer Hope ® All rights reserved.
Powered by SMF 2.0 RC3 | SMF © 2006–2010, Simple Machines LLC
Page created in 0.12 seconds with 20 queries.