View Single Post
Old 11-16-2008, 11:49 AM   #42 (permalink)
bajanknight
I helped the forums.
 
bajanknight's Avatar
 
Join Date: Nov 2008
Location: Florida
Posts: 34
OS: win xp home sp2


Send a message via MSN to bajanknight
Re: Programs Restricted/no desktop/Virtumonde

The processes which show running in Safemode-Admin taskmanager are:

taskmgr.exe
svchost.exe
svchost.exe
svchost.exe
isass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
System
System Idle Process SYSTEM

after gpupdate command, and the windows can't find /idlist popup
explorer.exe is added to the above active processes


I moved the Combofixx.exe back to the desktop (executable) as you are instructing me to drag instead of using commands to start it.

Before I forget, should I move ComboFixx.exe back onto c:before a reboot? As the runonce entry is probably still in the reg

Combofix begins runs and I see a brief window that indicates
windows cannot find combofix...

then it disappears …
then I prompt Yes for 'Terms'
Combofix continues its process and I then get a “Windows is running in safemode” popup.

Combofix is rebooting itself, do I force into Safemode-Steph or let it try to go into Normal-Steph

Well, its on the Normal Mode login screen now, what should I do?


On your last post I think you were asking If I was previously able to gain control under Safemode-Steph … and the answer was no. Same response as Normal-Steph with the exception of No Wallpaper.
bajanknight is offline