I'll try to keep this short....
This lady I know had a lot of spyware and stuff and said her old virus scanner reported she had a trojan virus but could not get rid of it. So, I install adaware SE, MS Beta Spyware, and HIJackThis and ran them. It found plenty of spyware and that was removed. To get rid of the virus I ran AVG Free Edition and during the scan the computer rebooted. Not good I thought. I took it into safe mode and ran a full scan with AVG. It made it through and found A BUNCH of infected files. It said that it healed them all. But, everytime the computer rebooted in normal mode it would get to the GUI and reboot. It would work fine in safe mode so I took out everything in startup but it still came back. The one check that I unchecked came back every time telling me it was the virus. I found the registry key that MSCONFIG reported and deleted it. That did nothing and it came back upon reboot telling me that there were duplicates in the registry. How can I get rid of this sucker?
Summary: Virus is in the registry that makes the computer ALWAYS reboot in normal mode.
The key that was in the registry was:
%systemroot%\system32\Dumprep 0 -k
Is it the dumprep virus?
Thanks for reading,
Stu
This lady I know had a lot of spyware and stuff and said her old virus scanner reported she had a trojan virus but could not get rid of it. So, I install adaware SE, MS Beta Spyware, and HIJackThis and ran them. It found plenty of spyware and that was removed. To get rid of the virus I ran AVG Free Edition and during the scan the computer rebooted. Not good I thought. I took it into safe mode and ran a full scan with AVG. It made it through and found A BUNCH of infected files. It said that it healed them all. But, everytime the computer rebooted in normal mode it would get to the GUI and reboot. It would work fine in safe mode so I took out everything in startup but it still came back. The one check that I unchecked came back every time telling me it was the virus. I found the registry key that MSCONFIG reported and deleted it. That did nothing and it came back upon reboot telling me that there were duplicates in the registry. How can I get rid of this sucker?
Summary: Virus is in the registry that makes the computer ALWAYS reboot in normal mode.
The key that was in the registry was:
%systemroot%\system32\Dumprep 0 -k
Is it the dumprep virus?
Thanks for reading,
Stu