locked
cmd.exe RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    Üdv,

    a jelenség a következő, a cmd parancs után az asztalról eltünnek az ikonok, majd néhány másodperc múlva ismét megjelennek, de a paracssor nem jelenik meg.

    mi lehet az oka?

    előre is köszi mindenkinek.

    János
    Tuesday, May 12, 2009 2:04 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote
    Szia!

    Nem eltünteti az ikonak, hanem újra indítja a explorer.exe-t

    A lényeg ez:

    The file I deleted was

    C:\windows\lot.rjr

    (though this file is named differently in every instance of the malware)

    and the registry entry I updated was

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32

    "aux"="C:\WINDOWS\system32\..\lot.rjr"

    Again, I set Hijack to delete the file on reboot, and after reboot, updated the registry key to a value of "wdmaud.drv".

    Now that I again have the ability to update ...MalwareBytes pattern files, I am in the process of running all the scans again with the latest pattern files,...


    egyébként, pedig itt találtam: http://www.bleepingcomputer.com/forums/topic215025.html

    Nálam megoldotta a gondokat :)

    András
    • Proposed as answer by Vörös András Wednesday, August 26, 2009 6:27 PM
    • Marked as answer by Janos1967 Friday, October 16, 2009 8:29 AM
    Thursday, May 14, 2009 8:58 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    trójaira gyanakodnék, a minap kínlódtam egy hasonló esettel.

    Nézd meg ezek alapján:

    http://forum.avira.com/wbb/index.php?page=Thread&threadID=89240
    Laci
    Tuesday, May 12, 2009 2:14 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    szia,
    megnéztem a linket, de szerintem valami más lehet nálam.
    köszi
    Tuesday, May 12, 2009 2:23 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    "Szokásos" eljárás:
    - viruskergetés full scan (pl. nod32 kipróbálós verzió, ha nincs felrakva más)
    - Ad-Aware full scan
    - Spybot S&D full scan

    (eltart egy ideig)
    Kurbli (http://msmvps.com/blogs/kurbli/)
    Tuesday, May 12, 2009 2:31 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Szia!

    Nem eltünteti az ikonak, hanem újra indítja a explorer.exe-t

    A lényeg ez:

    The file I deleted was

    C:\windows\lot.rjr

    (though this file is named differently in every instance of the malware)

    and the registry entry I updated was

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32

    "aux"="C:\WINDOWS\system32\..\lot.rjr"

    Again, I set Hijack to delete the file on reboot, and after reboot, updated the registry key to a value of "wdmaud.drv".

    Now that I again have the ability to update ...MalwareBytes pattern files, I am in the process of running all the scans again with the latest pattern files,...


    egyébként, pedig itt találtam: http://www.bleepingcomputer.com/forums/topic215025.html

    Nálam megoldotta a gondokat :)

    András
    • Proposed as answer by Vörös András Wednesday, August 26, 2009 6:27 PM
    • Marked as answer by Janos1967 Friday, October 16, 2009 8:29 AM
    Thursday, May 14, 2009 8:58 PM