|
Re: Programs Restricted/no desktop/Virtumonde
The processes which show running in Safemode-Admin taskmanager are:
taskmgr.exe
svchost.exe
svchost.exe
svchost.exe
isass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
System
System Idle Process SYSTEM
after gpupdate command, and the windows can't find /idlist popup
explorer.exe is added to the above active processes
I moved the Combofixx.exe back to the desktop (executable) as you are instructing me to drag instead of using commands to start it.
Before I forget, should I move ComboFixx.exe back onto c:before a reboot? As the runonce entry is probably still in the reg
Combofix begins runs and I see a brief window that indicates
windows cannot find combofix...
then it disappears …
then I prompt Yes for 'Terms'
Combofix continues its process and I then get a “Windows is running in safemode” popup.
Combofix is rebooting itself, do I force into Safemode-Steph or let it try to go into Normal-Steph
Well, its on the Normal Mode login screen now, what should I do?
On your last post I think you were asking If I was previously able to gain control under Safemode-Steph … and the answer was no. Same response as Normal-Steph with the exception of No Wallpaper.
|