Computing.Net > Forums > Windows NT > fatso worm

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

fatso worm

Reply to Message Icon

Name: gerard collon
Date: October 13, 2005 at 08:40:42 Pacific
OS: NT
CPU/Ram: *
Comment:

The computer I am working on has all the symptoms of the FASTO worm. The insulting textpad messages. It has modified the registry so that I cannot run regedit or task manager. I found some of the tell-tale .pif files such as Fat Elvis! lol.pif on the computer and deleted them. I cannot, however see any of the programs that are supposed to be running. lspt.exe - formatsys.exe - serbw.exe - msmbw.exe. I cannot load an anti-virus prgramme as I cannot run an executable. Can annyone help?




Sponsored Link
Ads by Google

Response Number 1
Name: Windows 2000 Expert
Date: October 13, 2005 at 12:12:51 Pacific
Reply:

The first thing you need to do is go online and scan your system using a web-based virus scanner. Unfortunately, this worm probably has blocked access to such sites. But you can unblock them. Windows NT/2000 have a file hidden in the C:\WINNT\system32\drivers\etc directory called hosts. Hosts is a file with no extension that blocks sites that are listed in it. Delete this file (it will automatically be recreated with no entries). Now go to a site that offers web-based virus scanning. I recommend Panda's ActiveScan [It requires email registration]. It uses an Active-X control to check your system, so you need to use Internet Explorer. Now, to keep your system tools unblocked, rename them with the .com extension (which, like .exe, are executable). Rename regedit.exe to regedt.com and taskmgr.exe to taskmgr.com. Once you have done this and web-scanned your system for viruses, then get an anti-virus program for your PC so you can remove any leftover traces of the Fatso.Worm virus. [I recommend AntiVir PE, www.antivir.de].


0

Response Number 2
Name: Jennifer SUMN
Date: October 18, 2005 at 08:38:38 Pacific
Reply:

Locate your regedit.exe file, change it to .com, and you can then open it and make the necessary changes.

Soylent Green is PEOPLE!!!


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows NT Forum Home


Sponsored links

Ads by Google


Results for: fatso worm

Unresolve spyware/worm?? www.computing.net/answers/windows-nt/unresolve-spywareworm/22213.html

Bat.mumu.A&B.worm, W32.valla .... N www.computing.net/answers/windows-nt/batmumuaampbworm-w32valla-n/21788.html

error messages and freezing up www.computing.net/answers/windows-nt/error-messages-and-freezing-up/5005.html