Computing.Net > Forums > Windows Me > Trojan bootconf virus

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan bootconf virus

Reply to Message Icon

Name: Ed Lovercheck
Date: October 17, 2003 at 05:42:31 Pacific
OS: dell 4600/Win ME
CPU/Ram: Pentium4/256mb
Comment:

I ran a scan of my computer and it says file c:\windows\default.css is infected with trojan bootconf virus. How do I get rid of the virus and restore the file or do I need this file. I have norton anti virus program.



Sponsored Link
Ads by Google

Response Number 1
Name: Joe
Date: October 17, 2003 at 06:14:04 Pacific
Reply:

Go to www.symantec.com and then click Latest Threats.


0

Response Number 2
Name: wawadave
Date: October 17, 2003 at 08:44:51 Pacific
Reply:

free trojin scan
http://www.trojanscan.com/trojanscan
panda scan
http://www.pandasoftware.es/activescan/
housecall
http://housecall.trendmicro.com/housecall/start_corp.asp
nrav av
http://www.ravantivirus.com/scan/
avast cleaning tool
http://www.avast.com/i_idt_171.html
mcafee avert stinger
http://vil.nai.com/vil/stinger/
virus scan
http://www.bitdefender.com/scan/licence.php


0

Response Number 3
Name: Nesh
Date: October 17, 2003 at 13:14:49 Pacific
Reply:

Hey, I am in the process of cleaning a friends machine of the same thing....I used Fprot from dos, and it SEEMS to have cleaned everything up.....one of the virii he had on there (at least 4 different :-) ) had damaged kernel32, so i re installed windows, but i dont think thats the one you have here...


0

Response Number 4
Name: Tom41
Date: October 18, 2003 at 01:02:47 Pacific
Reply:

Trojan.Bootconf is the CoolWebSearch hijack..
Download and run CWShredder to remove it.

CWShredder


0

Response Number 5
Name: Tranz77
Date: October 20, 2003 at 07:10:57 Pacific
Reply:

Hi to anyone who has had the unfortunate run-in with the Trojan.bootconf virus...i recently had this thing on my machine and for all the good Norton is, it still was not able to delete it...but thanx to one "Tom 41" I have finally been able to rid my pc of this most annoying virus, its good to see that there are some good people out there willing to help. So i would like to extend my gratitude for helping out....that CW Shredder seems to have done what Norton's could not.


0

Related Posts

See More



Response Number 6
Name: Nick F
Date: October 22, 2003 at 14:11:31 Pacific
Reply:

I also got the Trojan bootconf virus and used CWShredder, which worked brilliantly.

I have subsequently found out that this programme is regularly updated and can be downloaded from:

www.spywareinfo.com

Incidentally, this virus came from CoolWebSearch, so I will definitely keep clear of this website in the future !


0

Response Number 7
Name: Sharon
Date: October 23, 2003 at 10:00:43 Pacific
Reply:

Nortons also told me I had the virus too! It wouldnt repair it so I quarantined it. However, after reading abour CWShredder I thought I'd try that. So I "restored" the file figuring I'd have to do that in order for this shredder to find it. However, should I have done that? Because this is the results I got from the shredder. What do I due since it said it was not found? The virus was located at C:program files.....blah blah...\msinfo.exe

- 0 registry values were killed
- Hostsfile was OK
- Bootconf.exe was not present
- Trusted Zone was OK
- User stylesheet was OK
- Oemsyspnp.inf was not present
- Svchost32.exe was not present
- Msspi.dll Winsock hook was not present
- Msinfo.exe was not present
- Winshow.dll BHO was not present
- MadFinder BHO was not present
- Ctfmon32.exe was not present


0

Response Number 8
Name: Namor27
Date: October 23, 2003 at 20:04:02 Pacific
Reply:

Hi, Sharon. I have the exact same problem, only I ran CWShredder while Norton quarantined the msinfo.exe. Shredder killed 2 registry values, but msinfo.exe remains quarantined in Norton, and I have no clue what to do with it. Will someone please help us?


0

Response Number 9
Name: shawnbhawn
Date: October 24, 2003 at 07:19:13 Pacific
Reply:

I used the CWshredder to get rid of trojan.bootconf. However, I still seem to be having problems. When I turn on my computer, I'm asked to log on to the internet, when I'm on the internet, I can't open any web pages!!
Then, when I close Internet Explorer (or any window for that matter), Windows Installer comes up and tries to install something for Norton Antivirus.

I have no idea what to do! Any help would be greatly appreciated!


0

Response Number 10
Name: Michael
Date: November 20, 2003 at 16:16:33 Pacific
Reply:

The CWShredder found residual elements of the Cool Web Search spyware\trojan\virus program. However, one component 'MadFinder' continually shows up on numerous computers on our network (not shared)after CWShredder removes it. I've searched each registry for svc.exe and a host of other 'trigger files' listed on the internet without success. Even followed CWShredder's prevention instructions and removed MS JVM, which is no longer supported my Bill, and replaced it with Sun Microsystems' Java Machine... and guess what... MadFinder was found once again.

Ad Aware and Spybot also claim that MadFinder has been found and removed, but it continues to reappear.

Frustrating...


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Me Forum Home


Sponsored links

Ads by Google


Results for: Trojan bootconf virus

Trojan.byteverify virus help www.computing.net/answers/windows-me/trojanbyteverify-virus-help/39042.html

Help with Trojan.AppActXcomp virus www.computing.net/answers/windows-me/help-with-trojanappactxcomp-virus/27921.html

Trojan Horse Virus www.computing.net/answers/windows-me/trojan-horse-virus/39636.html