Brief help needed!!

GmanUK · 08-25-2005, 04:32 AM

I have been infected by the Wininit.exe worm also known as: Dnet.Dropper, Worm.Brymer.a etc... Now I know how to get rid of this little blighter but at the moment something is stopping me...

When I boot in to Safe Mode I can't seem to run Norton Internet Security 2005!! Need to do a full sweep before I start deleting all the files but can't seem to get it running... just pops up with a 'Wndows Report/De-bug' box..

Any ideas?

MicroBell · 08-25-2005, 06:28 PM

Hi and Welcome to TSF

Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running.

Also make sure you are using the the latest version (1.99.1) of HijackThis and it's installed in it's own folder on the root drive. (C:\HJT)

Please run an online scan at http://www.pandasoftware.com/actives..._principal.htm
Once it has finished save the activescan log. Then post that log in your next post.

Download Silent runners.Vbs http://www.silentrunners.org/
1. Make sure you have any script blocking software disabled
2. Run the program. It will take a few minutes to complete.
3. Once complete it will produce a log named “StartupPrograms” with Your user and date in the filename. Open that txt file and posts it contents in your next post.

Download: StartDreck

Unzip to its own folder and start the program:
Press 'Config'
Press 'Mark All'

UN-Check the 'NT-Services & NT-Kernel...' boxes only:
Press 'Ok'

Press 'Save' and select the location to save the log file (default is the same folder as the application)

Post the log in this thread..

GmanUK · 08-26-2005, 01:36 PM

Thanks for your reply MicroBell,

I have now sorted this issue.

Regards

G

08-25-2005, 04:32 AM	#1 (permalink)
GmanUK Member Join Date: Aug 2005 Location: UK Posts: 22 OS: XP SP2 (Slipstreamed)	Brief help needed!! I have been infected by the Wininit.exe worm also known as: Dnet.Dropper, Worm.Brymer.a etc... Now I know how to get rid of this little blighter but at the moment something is stopping me... When I boot in to Safe Mode I can't seem to run Norton Internet Security 2005!! Need to do a full sweep before I start deleting all the files but can't seem to get it running... just pops up with a 'Wndows Report/De-bug' box.. Any ideas?

08-25-2005, 06:28 PM	#2 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,965 OS: Windows XP-Pro SP2	Hi and Welcome to TSF Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running. Ad-Aware® SE Personal Edition Spybot Search & Destroy CWShredder Also make sure you are using the the latest version (1.99.1) of HijackThis and it's installed in it's own folder on the root drive. (C:\HJT) Please run an online scan at http://www.pandasoftware.com/actives..._principal.htm Once it has finished save the activescan log. Then post that log in your next post. Download Silent runners.Vbs http://www.silentrunners.org/ 1. Make sure you have any script blocking software disabled 2. Run the program. It will take a few minutes to complete. 3. Once complete it will produce a log named “StartupPrograms” with Your user and date in the filename. Open that txt file and posts it contents in your next post. Download: StartDreck Unzip to its own folder and start the program: Press 'Config' Press 'Mark All' UN-Check the 'NT-Services & NT-Kernel...' boxes only: Press 'Ok' Press 'Save' and select the location to save the log file (default is the same folder as the application) Post the log in this thread.. __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder

08-26-2005, 01:36 PM	#3 (permalink)
GmanUK Member Join Date: Aug 2005 Location: UK Posts: 22 OS: XP SP2 (Slipstreamed)	Thanks for your reply MicroBell, I have now sorted this issue. Regards G