Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Possible virus attack - help please

 
   Security Forums (Home) -> General Discussions RSS
Next:  found TrojanDownloader.Win32.RVP.c how to remove ..  
Author Message
Malcolm

External


Since: Jan 02, 2004
Posts: 1



(Msg. 1) Posted: Fri Jan 02, 2004 1:39 pm
Post subject: Possible virus attack - help please
Archived from groups: alt>comp>virus (more info?)

Can anyone help with this problem with my machine please - On switching on,
Windows 98 appears to start up correctly, but only gets as far as playing the
startup jingle and showing the desktop wallpaper. Then there is a very brief
flash of what appears to be the taskbar, and the mouse pointer is visible but
nothing else. No desktop icons, no taskbar, no shortcut bar. The mouse pointer
moves with the mouse, but mouse buttons do not do anything. Keyboard is
unresponsive apart from Ctl - Alt - Del. That shows nothing to be running and
all you can do is shutdown again. Data CDs will not autorun on insertion.
Booting in Safe mode has the same result. I can however boot to the command
prompt which seems to be working OK.

Based on what I had been doing there are 2 likely causes for the situation -

First and most likely, a virus type thing - while surfing to the BBC news
website earlier, the page was slower than usual to come up, then I got a popup
box telling me that something had been found (something like spyware.exe or
similar) and did I want to delete it. Assuming it was a message from an anti
virus program I {stupidly} clicked yes. Horrible feeling now, that that may
have allowed something nasty to install itself.

The other thing I was doing was installing Nero and PowerDVD 5 which had been
bundled with a new CDRW/DVD combi drive I had just put into the machine. The
machine was rebooting after I had clicked to turn on DMA access on the drive
during the PowerDVD setup routine, when the problem became apparent. I suppose
then there could be some sort of driver or other problem associated with this,
but it seems less likely than the virus explanation.

Any help appreciated.
Malcolm (Fantrace).

Be happy.

 >> Stay informed about: Possible virus attack - help please 
Back to top
Login to vote
Gabriele Neukam

External


Since: Sep 14, 2004
Posts: 462



(Msg. 2) Posted: Fri Jan 02, 2004 6:32 pm
Post subject: Re: Possible virus attack - help please [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On that special day, Malcolm, (fantrace@aol.comantispam) said...

> The other thing I was doing was installing Nero and PowerDVD 5 which had been
> bundled with a new CDRW/DVD combi drive I had just put into the machine. The
> machine was rebooting after I had clicked to turn on DMA access on the drive
> during the PowerDVD setup routine, when the problem became apparent.

That might be due to a chipset problem. I experienced crashes with VIA
chipsets on older (Apollo3) VIA chipsets, if the DMA was activated
without prior installation of the mainboard busmaster drivers.

Maybe you can get it back running if you start the machine in command
line and type

scanreg /restore

followed by hitting the Enter key. Then you should be presented with a
menu of five stages of former Registry versions. Choose one that was
saved before you changed the DMA setting and try again. Maybe you have
to install the Nero software, too, because it hadn't been part of the
registry at the given date.

Reboot, check if it works.

But before you re-enableDMA, first get some recent mainboard drivers (I
bet your Nero version is way younger than your mainboard driver CD) from
the homepage of the chipset manufacturer. For VIA it is
www.viaarena.com, the intel, ALi and SiS chipsets will have respective
driver homepages, too.


Gabriele Neukam

Gabriele.Spamfighter.Neukam DeleteThis @t-online.de


--
Ah, Information. A good, too valuable theses days, to give it away, just
so, at no cost.

 >> Stay informed about: Possible virus attack - help please 
Back to top
Login to vote
Ceily

External


Since: Jan 13, 2004
Posts: 9



(Msg. 3) Posted: Fri Jan 02, 2004 11:36 pm
Post subject: Re: Possible virus attack - help please [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

It has been a long time since I used Win98. But I would probably try to
"save" what I got before I reinstalled windows. DOS is the magic word here!
Did you make emergency boot disks on installation? It will help you restore
your last registry back-up that windows makes automatically. And you can
also scan your disk for errors. This may be all you need.

When you are done, you could even run a virus scanner without even booting
into windows. There are many ways of doing this. The easiest way is
running your virus scanners "rescue disks". You can just use it to scan,
you don't have to restore anything if a virus isn't found.

There is so much more you can do. Such as checking your start-up files
with the "edit" command. You could also rename your win.ini file to
win.ina. Windows will make a new win.ini file. If that works, then add
back 1/4 sections of it at a time until it fails again. Than narrow down
that section to even smaller sections, and add them back. etc...

Ahhh I miss those DOS days
Ceily

"Malcolm" <fantrace.RemoveThis@aol.comantispam> wrote in message
news:20040102083908.15799.00001007@mb-m21.aol.com...
> Can anyone help with this problem with my machine please - On switching
on,
> Windows 98 appears to start up correctly, but only gets as far as playing
the
> startup jingle and showing the desktop wallpaper. Then there is a very
brief
> flash of what appears to be the taskbar, and the mouse pointer is visible
but
> nothing else. No desktop icons, no taskbar, no shortcut bar. The mouse
pointer
> moves with the mouse, but mouse buttons do not do anything. Keyboard is
> unresponsive apart from Ctl - Alt - Del. That shows nothing to be running
and
> all you can do is shutdown again. Data CDs will not autorun on insertion.
> Booting in Safe mode has the same result. I can however boot to the
command
> prompt which seems to be working OK.
>
> Based on what I had been doing there are 2 likely causes for the
situation -
>
> First and most likely, a virus type thing - while surfing to the BBC news
> website earlier, the page was slower than usual to come up, then I got a
popup
> box telling me that something had been found (something like spyware.exe
or
> similar) and did I want to delete it. Assuming it was a message from an
anti
> virus program I {stupidly} clicked yes. Horrible feeling now, that that
may
> have allowed something nasty to install itself.
>
> The other thing I was doing was installing Nero and PowerDVD 5 which had
been
> bundled with a new CDRW/DVD combi drive I had just put into the machine.
The
> machine was rebooting after I had clicked to turn on DMA access on the
drive
> during the PowerDVD setup routine, when the problem became apparent. I
suppose
> then there could be some sort of driver or other problem associated with
this,
> but it seems less likely than the virus explanation.
>
> Any help appreciated.
> Malcolm (Fantrace).
>
> Be happy.
 >> Stay informed about: Possible virus attack - help please 
Back to top
Login to vote
Adrian_S

External


Since: Jan 04, 2004
Posts: 2



(Msg. 4) Posted: Sun Jan 04, 2004 6:28 pm
Post subject: Re: Possible virus attack - help please [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Malcolm wrote:
> Can anyone help with this problem with my machine please - On switching on,
> Windows 98 appears to start up correctly, but only gets as far as playing the
> startup jingle and showing the desktop wallpaper. Then there is a very brief
> flash of what appears to be the taskbar, and the mouse pointer is visible but
> nothing else. No desktop icons, no taskbar, no shortcut bar. The mouse pointer
> moves with the mouse, but mouse buttons do not do anything. Keyboard is
> unresponsive apart from Ctl - Alt - Del. That shows nothing to be running and
> all you can do is shutdown again. Data CDs will not autorun on insertion.
> Booting in Safe mode has the same result. I can however boot to the command
> prompt which seems to be working OK.
>

Sounds like a typical W98 screw-up Smile

If you can get a dos prompt, try looking in the file bootlog.txt and see
what the last entry is ( more bootlog.txt )

Alternatively, when you get the option to boot in safe mode, try the
interactive option, where each item that is about to be loaded is
presented with a Y/N prompt. After identifying the one which causes it
to hang, try skipping it on the next attempt, and so on until you get to
Windows with a task bar. Then, try (start) run msconfig .

You've probably just got a corrupt driver file or bad dll, but it might
have been stuffed by whatever happened with that popup.

It was things like this made me switch to Linux. It was things like
rootkits made me switch back to W98 Smile

Adrian_S

(To reply by mail, drop the hyphens and contents )
 >> Stay informed about: Possible virus attack - help please 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Email attack with virus attachments question - I posted a question the other day on micorsoft.public.* newsgroups and am now being attacked by emails every 3 minutes supposedly from microsoft. I am also rec'd undeliverable mail which I never sent out orignally. Is there any way to stop these email....

Religious freedom under attack.eml - Is this a virus?

about virus - Hello, Help me please. When I browse internet, I often get virus warning messages: Virus name: W32/Deloder.worm Infected file: C:\WINNT\system32\Dvldr32.exe and Virus name: BackDoor-ARG.dr Infected file: C:\WINNT\system32\inst.exe Neither files can be....

Have I a virus? - Avery now and then, randomly, no pattern a loud duck quack sounds from my computer. I have no WAV file ion my system for this and have searched evrywhere for something that would explain it. I have SPY BOT and AD-ware installed. n uptodate virus cvheck....

Is this a virus? - 'I keep on getting an e-mail with the subject "Love Nest Is Temp Out". It suggests that I have been trying to get in touch. Also I am getting the same message with a message that the ISP will keep trying to connect to address that sent the mes...
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]