Forum Home
Press F1
 
Thread ID: 56472 2005-04-06 00:06:00 The trojans stole my mouse Organicpete (133) Press F1
Post ID Timestamp Content User
341973 2005-04-06 00:06:00 win 98se with OS in partition

Zone alarm spotted the sod (exe. something) when it arrived...
but due to user stupidity,
it was not zapped...doh
now I can't open anything on desktop and trying to hangs the dear old thing...
fortunately all is viewable from drive two which has the XP whale.

Question...
can I avoid a reload of win98?
if I have to, can I install over top and keep other partitions intact ?
I want to stay with win98se for the present

Thanks
Pete
Organicpete (133)
341974 2005-04-06 00:17:00 Well installing over 98, may NOT necessarily remove this trojan, or whatever it is.

It will still be there.

Does the task manager thing work?? or is EVERYTHING dead?

If XP boots, just boot with that for now. Do a scan on the 98 partition, online, or with a virus scanner and remove it.
Speedy Gonzales (78)
341975 2005-04-06 00:19:00 I would try starting in safe mode, and see what you can do then Myth (110)
341976 2005-04-06 00:40:00 Thanks Guys

scanning it from XP is a good idea....
I did find and delete it before this happened...

It will open a menu but any left click then freezes everything...

how would starting in safe mode help ?

I coincidentally installed MS Publisher after trojan excitment...
first suspected it was its fault but its never done this before...
sigh
Pete
Organicpete (133)
341977 2005-04-06 00:54:00 Safe mode disables most things, so only the files needed to boot windows load.

Then u can if the trojan is still there, find where its coming from delete/remove it and reboot.

Hopefully the trojan disappears. Whatever this file is, it might be running on bootup in the registry here. (I think 98 has this).

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

or

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce

or

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices

or HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

Also, it might be under start/run type msconfig. Under the startup tab (can't remember whether 98 has this or not). Find any strange entries and untick then reboot.
Speedy Gonzales (78)
341978 2005-04-06 12:38:00 Thanks for the comprehensive reply SG :)
will checkout
Pete
Organicpete (133)
341979 2005-04-06 21:05:00 No worries. Hope u fix it! Speedy Gonzales (78)
341980 2005-04-06 23:11:00 Why not use a trojan remover?

www.simplysup.com
Cicero (40)
341981 2005-04-07 00:09:00 OK so I'm d/ling the trojan remover
will run that then whip into safe mode and check the startup items..

just glad I continue to have a full OS on the second drive :)
cheers
Pete
Organicpete (133)
341982 2005-04-07 06:35:00 Happiness is not mine...
Trojan scan revealed zilch...
I had deleted it at the start....
but did mangage to get to msconfig/startup and it was sweet with no nasties...
I think this thing has messed with the system so left click hangs it...
might format and reload win 98 altogether...
quite like to try to just format the OS partition and see if the data petitions survive :)
spose connecting it to the net was a fatal error :)
Pete
Organicpete (133)
1