DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Windows NT / 2000 / XP (http://www.daniweb.com/forums/forum10.html)
-   -   Help with XP (possibly infected with hacktool.rootkit) (http://www.daniweb.com/forums/thread29750.html)

hiroshiri Aug 3rd, 2005 5:04 pm
Help with XP (possibly infected with hacktool.rootkit)
 
Norton detected hacktool.rootkit and I was able to remove it and I believe the infected files as well, and now when I go to log in it makes the windows sound like it does when you successfully log in then it immediatley logs me out.

I've looked at microsoft.com and searched this website but I didn't see any relevant information.

Can someone help?

kccomputerdr Aug 3rd, 2005 8:57 pm
Re: Help with XP (possibly infected with hacktool.rootkit)
 
Quote:

Originally Posted by hiroshiri
Norton detected hacktool.rootkit and I was able to remove it and I believe the infected files as well, and now when I go to log in it makes the windows sound like it does when you successfully log in then it immediatley logs me out.

I've looked at microsoft.com and searched this website but I didn't see any relevant information.

Can someone help?

Virus makers are smarter than your antivirus software, especially if you don't subscribe to the latest updates. If you don't want to pay money, go to www.free-av.com. Uninstall Norton & download the free Antivir. updates there are free

Soupy Aug 4th, 2005 3:14 pm
Re: Help with XP (possibly infected with hacktool.rootkit)
 
Quote:

Originally Posted by kccomputerdr
Virus makers are smarter than your antivirus software, especially if you don't subscribe to the latest updates. If you don't want to pay money, go to www.free-av.com. Uninstall Norton & download the free Antivir. updates there are free


Uh, not sure if you read the post or not, but he cant log in to Windows. It logs him right out.

I believe I ran into this problem a while back and it turned out to be that a virus had gotten into my registry and change a key.

If you can get into the Administrator account in safe mode, open regedit and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

Check the value there and make sure it is set to C:\WINDOWS\system32\userinit.exe or c:\windows\explorer.exe

Also, just above that key, check the Shell key and make sure it says explorer.exe

If you cannot get in through safe mode and you have access to another computer to burn a disk, there are several options to modify the registry, such as http://sourceforge.net/projects/austrumi

Let us know!

Cheers!
Soup

hiroshiri Aug 16th, 2005 3:18 pm
Re: Help with XP (possibly infected with hacktool.rootkit)
 
Ok, I tried to log in with safe mode and it does the same thing. It logs me in and then a second later it logs me out and says 'saving your settings' on the log in/out window.

Not sure what to do now?

Thanks for the help Soupy!

kccomputerdr Aug 16th, 2005 10:33 pm
Re: Help with XP (possibly infected with hacktool.rootkit)
 
Quote:

Originally Posted by hiroshiri
Ok, I tried to log in with safe mode and it does the same thing. It logs me in and then a second later it logs me out and says 'saving your settings' on the log in/out window.

Not sure what to do now?

Thanks for the help Soupy!

If nobody else will help, then I'd take it at a loss & reinstall your operating system


All times are GMT -4. The time now is 8:02 am.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC