Not your average trojan..

delnaci · 05-26-2008, 12:44 AM

Okay, so let me give you what I know and have done so far:

The infected file is explorer.exe

I HAVE tried doing boot scans and going into safe mode; to no avail.
I HAVE tried to reformat, the thing is, whenever I boot my computer, instead of going into the usual 'Press any key to boot disc' screen, it skips to the Windows logo.
I HAVE gone into BIOS, and set the CD ROM to the highest priority, with no success.

I would greatly appreciate any help on this matter.

If any more information is needed, please post.

P.S. Please know that I would like to try fixing the computer without damaging any hardware physically.

Thank you.

dans_mahajan · 05-26-2008, 01:02 AM

when the system is booting press f8 key continuously and then select to boot from cdrom.
please note that xp cd must be bootable to repair windows

tetonbob · 05-26-2008, 07:51 PM

Are all copies of explorer.exe on the machine infected?

What's telling you explorer.exe is infected?

Is it a possible false positive?

Scan C:\Windows\explorer.exe at VirusTotal or Jotti.

Search the machine for other copies of explorer.exe

See if they are infected. If not, kill explorer using task manager, rename to .old extension or delete it and replace with a non-infected copy. (if there's a clean copy in system32\dllcache Windows File Protection should replace it with no interaction on your part).

05-26-2008, 12:44 AM	#1 (permalink)
delnaci Registered User Join Date: May 2008 Posts: 1 OS: XP SP2	Not your average trojan.. Okay, so let me give you what I know and have done so far: The infected file is explorer.exe I HAVE tried doing boot scans and going into safe mode; to no avail. I HAVE tried to reformat, the thing is, whenever I boot my computer, instead of going into the usual 'Press any key to boot disc' screen, it skips to the Windows logo. I HAVE gone into BIOS, and set the CD ROM to the highest priority, with no success. I would greatly appreciate any help on this matter. If any more information is needed, please post. P.S. Please know that I would like to try fixing the computer without damaging any hardware physically. Thank you.

05-26-2008, 01:02 AM	#2 (permalink)
dans_mahajan Registered User Join Date: May 2008 Posts: 28 OS: xp sp2	Re: Not your average trojan.. when the system is booting press f8 key continuously and then select to boot from cdrom. please note that xp cd must be bootable to repair windows

05-26-2008, 07:51 PM	#3 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,564 OS: 2000 Pro; XP Pro; XP Home	Re: Not your average trojan.. Are all copies of explorer.exe on the machine infected? What's telling you explorer.exe is infected? Is it a possible false positive? Scan C:\Windows\explorer.exe at VirusTotal or Jotti. Search the machine for other copies of explorer.exe See if they are infected. If not, kill explorer using task manager, rename to .old extension or delete it and replace with a non-infected copy. (if there's a clean copy in system32\dllcache Windows File Protection should replace it with no interaction on your part). __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009