Hello genome,

The virus must be starting somehow, so i suggest you check the
registry, maybe using hjt (hijackthis) to see what is loaded at
run-time, if it still wont work, take your time and do a boot-up
protocol (its in same menu where you can select safe mode) and read it
then, there you will be able to see what services the system loads
while booting and kill the ones which look suspect to you.
Once you killed the virus possibility to load/start you should be able
to install some av. and kill the rest of the garbage.
If some system entries have been modifyed that bad (i dont think they
are), maybe a new installation will be the only way to get out.

--
Best regards,
Adam Pal

Thursday, October 12, 2006, 8:08:19 AM, you wrote:

<==============Original message text===============
g> hello..
g> I am infected with a virus or a trojan that will not allow me to execute and
g> install any antivirus software or even install any windows updates offline
g> or online... It simply deletes certain exe files when extracted to the hard
g> disk.. and the software installation gives an error saying it cannot find
g> the file...

g> I tried booting in safemode from xp and extract the files manualy but the
g> antivirus wont install because its safemode so I boot xp normaly and browse
g> to the extraction directory only to find right in front of my eyes the exe
g> being deleted by the unknown virus.. tried different antivirus and they all
g> wont install... but other software that is not an antivirus will install...
g> I tried using an online scanner from bitdefender but it did not detect any..
g> I tried closing all running process in task manager and services running
g> still no avail..

g> anyone knows what virus or trojan that acts like this..can anyone please
g> inform me of its name so I may come to the right way of tracking a
g> solution..

g> thanks...

g> ------------------------------------------------------------------------
----
g> ALERT: "How a Hacker Launches a SQL Injection Attack!" - White Paper
g> It's as simple as placing additional SQL commands into a Web
g> Form input box giving hackers complete access to all your backend
g> systems!

g> https://download.spidynamics.com/1/ad/sql.asp?Campaign_ID=70160000000CZW
l
g> ------------------------------------------------------------------------
----

<===========End of original message text===========

------------------------------------------------------------------------
----
ALERT: "How a Hacker Launches a SQL Injection Attack!" - White Paper
It's as simple as placing additional SQL commands into a Web Form input box giving hackers complete access to all your backend systems!

https://download.spidynamics.com/1/ad/sql.asp?Campaign_ID=70160000000CZW
l
------------------------------------------------------------------------
----

[ reply ]