Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I'm working on a friends pc. It was loaded with trojans and spyware. Had his hard drive hooked to my computer, ran a full a/v scan using McAfee 2005, and spyware scan using AdAware. Both have most recent updates. Here's the problem: after hooking his hd back up to his pc, it won't boot up regularly, gets frozen at the signon screen. When I boot into safe mode (which takes years to boot into, I might add), once it finally gets logged on as administrator, svchost.exe and explorer.exe are both clocking in at apprx 50% each. This, of course, locks everything else up, so I can't perform HijackThis or anything else. Can't "end process" of explorer, and "end process" of svchost and you get the good old "shutting down in 10...9...8...7...etc,etc,etc". I need some suggestions guys!!! Help!!!

Try downloading the Sasser worm removal tool to a floppy or cd and run it on the problem computer http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html
You will need to disable system restore to purge any viruse/malware from there and you can wait until you run the removal tool.
How to purge system restore

I agree with jabuck, disable the system restore, if the Sasser Worm removal tool doesn't find anything, find a tool called Stinger which finds and removes variuos viruses and trojans. Microsoft have also developed a simimlar tool that works as well.
Run these scanners in safe mode and diable the System Restore. AH, you can't get into the PC with the HDD in his compueter. Therefore, connect his HDD back into your PC and try the above.
You may also want to try and Boot up his PC with the McAfee CD and run a scan from there. As all the XP processors are totally disabled.
Hope this helps.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |