|
|
|
Vonner
Showing all messages in thread #1121187957
Windows XP Annoyances Discussion Forum
The following are all of the messages in this thread (11 in all), shown in chronological order. Click any message subject to view that message by itself or to view the thread hierarchy.
|
Vonner
Tuesday, July 12, 2005 at 10:05 am
Posted by Lisa
(8 messages posted)
After clearing up about 509 virus's on my niece's computer, I am left with about
5 files which are embedded and can't be cleaned. They're all to do with Vonner -
whatever that is. But now the machine boots with no desktop shortcuts or start bar
- it opens an explorer folder and that's it. Any ideas please? Oh, and she doesn't
have an XP disc :-)
[Reply or follow-up to this message]
| |
re: Vonner
Tuesday, July 12, 2005 at 10:14 am
Posted by Captain Lon
(47 messages posted)
My understanding is that vonner.exe is part of a virus. See more info:
http://www.sophos.com/virusinfo/analyses/trojmultidrkn.html
If you can't remove, then it is only a matter of time before it will invite all of
it's buddies back into your computer for a party! You will need to reformat and
reinstall windows (or what some manufacturers call 'recover')
Reformatting the drive and resinstalling windows will solve the problem for sure,
but you either need a disk (or borrow one), or some computers come with a 'hidden'
partition on the hard drive that contains everything needed to 'recover' a computer
in this condition.
During boot up, do you see an option of hitting "F10" for recovery or some similar
option? If so, you can use that do recover (renistall windows) on this machine,
as you are lucky and everything you need is in a hidden partition on your hard drive.
If not:
If you can borrow an OEM version of XP, then write down you existing Product Key
numbers (or it may be on a sticker on your computer), and reinstall windows using
the OEM disk and YOUR product key.
Another idea is to contact the computer manufacturer and purchase recovery disks
from them, if they are still available. Many manufacturers keep a small supply on
hand and sell them at a reasonable cost until they run out of inventory.
One last idea: Search for recovery disks for your particular make and model of computer
on Ebay. It is amazing what you can find for sale there!
Hope those ideas help.
Capt. Lon
On Tuesday, July 12, 2005 at 10:05 am, Lisa wrote:
>After clearing up about 509 virus's on my niece's computer, I am left with about
>5 files which are embedded and can't be cleaned. They're all to do with Vonner
-
>whatever that is. But now the machine boots with no desktop shortcuts or start
bar
>- it opens an explorer folder and that's it. Any ideas please? Oh, and she doesn't
>have an XP disc :-)
[Reply or follow-up to this message]
|
re: Vonner
Tuesday, July 12, 2005 at 10:24 am
Posted by Dan Sarandrea, MCSE
(7132 messages posted)
I am firmly convinced that infections of that magnitude have only one cure:
wipe the hard disk and start over.
Computers sold by major manufacturers are required by MS to come with some system
for reinstalling the operating system. Often the manufacturer will replace the Recovery
CDs or similar that shipped with the system for a small chage to cover costs.
[Reply or follow-up to this message]
|
re: Vonner
Tuesday, July 12, 2005 at 10:31 am
Posted by Falcon
(13489 messages posted)
See the steps below.
My Malware Removal Instructions
Perform the following:
-
Disable
System
Restore
*
- Perform an online
virus scan
*
*
*
*
.
- Download, update, and run these tools:
Repeat as necessary until clean.
- If you still experience problems after doing these steps, download
HijackThis
*
and post a log to this forum.
- To protect against reinfection, download and use these:
If at all possible, I recommend that you use alternative software, particularly
web browsers
and email clients:
If this is not a viable option, or for additional protection, use these:
- Optionally Reenable
System Restore
*
. Better
alternatives
to System Restore.
If you encounter any broken links, please inform
me of them. Also note that these links direct through my web server to
allow me to keep them
up-to-date or post additional info. If you are unable to use the links above,
click the stars
instead, which are a direct link to the page in question.
[Reply or follow-up to this message]
|
re: Vonner
Tuesday, July 12, 2005 at 10:44 am
Posted by werner
(7097 messages posted)
found this
http://www.sophos.com/virusinfo/analyses/trojmultidrkn.html
in addition to Falcon's Cleanup have a look here too at EWIDO,works pretty good.
http://www.ewido.net/en/download/
:) werner
[Reply or follow-up to this message]
|
re: Vonner
Wednesday, July 13, 2005 at 7:05 am
Posted by Lisa
(8 messages posted)
Dear all
Thanks so much for the help and input. I am convinced my niece's system is now squeaky
clean...however, on startup there is still no start bar and no desktop icons. What
else can I do??
And why do people do these things? This has cost me three days of my life and my
niece has lost all faith in me because 'her friends dad fixed the problem in an hour...'
Or is that a stupid question?!
On Tuesday, July 12, 2005 at 10:31 am, Falcon wrote:
>See the steps below.
>
>style="margin-left: 0; line-height: normal; color: black; font-size: medium">
>
>
>
>
> My Malware Removal Instructions
>
>
>
> Perform the following:
>
>
>
> Disable
>System
>Restore
>
> *
>
>
>
>
> - Perform an online
>virus scan
>
> *
>
>
>
> *
>
>
> *
>
>
> *
>
> .
>
>
> - Download, update, and run these tools:
>
> Repeat as necessary until clean.
>
>
>
> - If you still experience problems after doing these steps, download
> HijackThis
>
> *
>
> and post a log to this forum.
>
>
> - To protect against reinfection, download and use these:
>
> If at all possible, I recommend that you use alternative software, particularly
>web browsers
> and email clients:
>
>
> If this is not a viable option, or for additional protection, use these:
>
>
>
> - Optionally Reenable
>System Restore
>
> *
> . Better
>alternatives
>
>to System Restore.
>
>
>
> If you encounter any broken links, please inform
> me of them. Also note that these links direct through my web server to
>allow me to keep them
> up-to-date or post additional info. If you are unable to use the links above,
>click the stars
> instead, which are a direct link to the page in question.
>
>
>
>
>
>
>
[Reply or follow-up to this message]
|
re: Vonner
Wednesday, July 13, 2005 at 7:16 am
Posted by Falcon
(13489 messages posted)
I presume you can start Task Manager? Do so->Processes tab->End all instances of
explorer.exe->File->New taks->explorer.exe. Does that bring back the desktop? Also,
go ahead and post a HijackThis log.
My Malware Removal Instructions
Perform the following:
-
Disable
System
Restore
*
- Perform an online
virus scan
*
*
*
*
.
- Download, update, and run these tools:
Repeat as necessary until clean.
- If you still experience problems after doing these steps, download
HijackThis
*
and post a log to this forum.
- To protect against reinfection, download and use these:
If at all possible, I recommend that you use alternative software, particularly
web browsers
and email clients:
If this is not a viable option, or for additional protection, use these:
- Optionally Reenable
System Restore
*
. Better
alternatives
to System Restore.
If you encounter any broken links, please inform
me of them. Also note that these links direct through my web server to
allow me to keep them
up-to-date or post additional info. If you are unable to use the links above,
click the stars
instead, which are a direct link to the page in question.
[Reply or follow-up to this message]
|
re: Vonner
Wednesday, July 13, 2005 at 7:43 am
Posted by Lisa
(8 messages posted)
Hi, I've been doing just that, but I get another copy of the explorer window - no
start bar, no desktop. Neither can I access the desktop by right clicking, or by
dragging icons over.
On Wednesday, July 13, 2005 at 7:16 am, Falcon wrote:
>I presume you can start Task Manager? Do so->Processes tab->End all instances of
>explorer.exe->File->New taks->explorer.exe. Does that bring back the desktop? Also,
>go ahead and post a HijackThis log.
>
>style="margin-left: 0; line-height: normal; color: black; font-size: medium">
>
>
>
>
> My Malware Removal Instructions
>
>
>
> Perform the following:
>
>
>
> Disable
>System
>Restore
>
> *
>
>
>
>
> - Perform an online
>virus scan
>
> *
>
>
>
> *
>
>
> *
>
>
> *
>
> .
>
>
> - Download, update, and run these tools:
>
> Repeat as necessary until clean.
>
>
>
> - If you still experience problems after doing these steps, download
> HijackThis
>
> *
>
> and post a log to this forum.
>
>
> - To protect against reinfection, download and use these:
>
> If at all possible, I recommend that you use alternative software, particularly
>web browsers
> and email clients:
>
>
> If this is not a viable option, or for additional protection, use these:
>
>
>
> - Optionally Reenable
>System Restore
>
> *
> . Better
>alternatives
>
>to System Restore.
>
>
>
> If you encounter any broken links, please inform
> me of them. Also note that these links direct through my web server to
>allow me to keep them
> up-to-date or post additional info. If you are unable to use the links above,
>click the stars
> instead, which are a direct link to the page in question.
>
>
>
>
>
>
>
[Reply or follow-up to this message]
|
re: Vonner
Wednesday, July 13, 2005 at 8:58 am
Posted by Falcon
(13489 messages posted)
I presume you can start Task Manager? Do so->Processes tab->End all instances
of
explorer.exe (How many were there?)->File->New taks->explorer.exe. Does that
bring back the desktop? Also,
go ahead and post a HijackThis log.
My Malware Removal Instructions
Perform the following:
-
Disable
System
Restore
*
- Perform an online
virus scan
*
*
*
*
.
- Download, update, and run these tools:
Repeat as necessary until clean.
- If you still experience problems after doing these steps, download
HijackThis
*
and post a log to this forum.
- To protect against reinfection, download and use these:
If at all possible, I recommend that you use alternative software, particularly
web browsers
and email clients:
If this is not a viable option, or for additional protection, use these:
- Optionally Reenable
System Restore
*
. Better
alternatives
to System Restore.
If you encounter any broken links, please inform
me of them. Also note that these links direct through my web server to
allow me to keep them
up-to-date or post additional info. If you are unable to use the links above,
click the stars
instead, which are a direct link to the page in question.
[Reply or follow-up to this message]
|
re: Vonner
Thursday, July 14, 2005 at 4:05 am
Posted by Lisa
(8 messages posted)
Hi all
Ok, it worked on a reboot!! My credibility is restored and my niece has grunted
her approval. For interest, the files were called:
9.exe
999.exe
jaja.exe
Hidden in three seperate locations and I deleted them manually in the end.
Thanks to all and specially big hugs to Falcon.
Lisa
On Wednesday, July 13, 2005 at 8:58 am, Falcon wrote:
>I presume you can start Task Manager? Do so->Processes tab->End all instances
>of
>explorer.exe (How many were there?)->File->New taks->explorer.exe. Does that
>bring back the desktop? Also,
>go ahead and post a HijackThis log.
>
>style="margin-left: 0; line-height: normal; color: black; font-size: medium">
>
>
>
>
> My Malware Removal Instructions
>
>
>
> Perform the following:
>
>
>
> Disable
>System
>Restore
>
> *
>
>
>
>
> - Perform an online
>virus scan
>
> *
>
>
>
> *
>
>
> *
>
>
> *
>
> .
>
>
> - Download, update, and run these tools:
>
> Repeat as necessary until clean.
>
>
>
> - If you still experience problems after doing these steps, download
> HijackThis
>
> *
>
> and post a log to this forum.
>
>
> - To protect against reinfection, download and use these:
>
> If at all possible, I recommend that you use alternative software, particularly
>web browsers
> and email clients:
>
>
> If this is not a viable option, or for additional protection, use these:
>
>
>
> - Optionally Reenable
>System Restore
>
> *
> . Better
>alternatives
>
>to System Restore.
>
>
>
> If you encounter any broken links, please inform
> me of them. Also note that these links direct through my web server to
>allow me to keep them
> up-to-date or post additional info. If you are unable to use the links above,
>click the stars
> instead, which are a direct link to the page in question.
>
>
>
>
>
>
>
[Reply or follow-up to this message]
|
re: Vonner
Thursday, July 14, 2005 at 5:15 am
Posted by Falcon
(13489 messages posted)
You're welcome, though I really didn't do much! :)
My Malware Removal Instructions
Perform the following:
-
Disable
System
Restore
*
- Perform an online
virus scan
*
*
*
*
.
- Download, update, and run these tools:
Repeat as necessary until clean.
- If you still experience problems after doing these steps, download
HijackThis
*
and post a log to this forum.
- To protect against reinfection, download and use these:
If at all possible, I recommend that you use alternative software, particularly
web browsers
and email clients:
If this is not a viable option, or for additional protection, use these:
- Optionally Reenable
System Restore
*
. Better
alternatives
to System Restore.
If you encounter any broken links, please inform
me of them. Also note that these links direct through my web server to
allow me to keep them
up-to-date or post additional info. If you are unable to use the links above,
click the stars
instead, which are a direct link to the page in question.
[Reply or follow-up to this message]
| |
| |
Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread
| |
Return to the Windows XP Discussion Forum
|
|
|
|
