re: odbc.hta
Wednesday, March 17, 2004 at 8:28 am
Windows XP Annoyances Discussion Forum
Posted by Jordan Lund
(4 messages posted)
I'm seeing the same thing in Windows 98. My solution was to attack it through the
command line.
C:\windows showed two files that shouldn't be there, odbc.hta (which was running
on startup) and homepage.htm (the default homepage after odbc.hta runs). I was able
to edit both with the command line and it looks like they both contain a bunch of
encrypted Javascript. It also looks like both contain the same code so unless you
remove both you will continue to be "re-infected."
The erase command didn't work initially because they're flagged as system, hidden
or read-only.
attrib odbc.hta showed hidden and system so:
attrib -s -h odbc.hta took care of that allowing erase to work.
attrib homepage.htm showed it was hidden so:
attrib -h homepage.htm removes the hidden flag.
Just for fun I checked msconfig to see if I could find where odbc.hta was running
from, no dice. Regedit also ran clean for that string and there wasn't anything weird
in the startup folder so I have no idea where that file is running from.
- Written in response to:
- re: odbc.hta (jude: Tuesday, March 16, 2004 at 5:15 am)
Responses to this message:
|
|
All messages in this thread [show all]
 | odbc.hta (Albert: Tue, Mar 2, 2004, 8:26 am) |
 | | | | | re: odbc.hta (Jordan Lund: Wed, Mar 17, 2004, 8:28 am) |
| |
| |
| |
Return to the Windows XP Discussion Forum
|
|
