Computing.Net > Forums > Windows XP > Trojan Horse-C:\bootconf.exe

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan Horse-C:\bootconf.exe

Reply to Message Icon

Name: Haz
Date: September 28, 2003 at 19:57:56 Pacific
OS: Windows XP
CPU/Ram: HP
Comment:

Norton picked up and posted the following message:
Virus Name: Trojan Horse
Object Name: C:\bootconf.exe
Not quarantined
Norton screen comes on at each start up showing the virus name then a second screen with the object name. Wonder why if Norton detected this why it didn't repair it or quarantine it. Have looked on Norton's home page and could not find anything. Not for sure what it is, but did find file filebootconf.exe while doing a file search. Not real computer smart but willing to try anything to repair it. Norton has been updated and active subscription now and before the virus was detected. Have looked at Trojan repairs but nothing was noted on this perticular object so not for sure if any of them would work.Thanks for everyone's help



Sponsored Link
Ads by Google

Response Number 1
Name: BackPacker
Date: September 28, 2003 at 20:04:12 Pacific
Reply:

What is Global-Finder.com?
Global-Finder.com is a website search engine organized into a wide variety of categories and groups. It based upon and links to another search engine called clearsearch.net. It takes over as your start page or default search engine in Internet Explorer. It appears to be a variant of the CoolWebSearch homepage hijacker as well.

How do I Remove Global-Finder?

1) Search for and delete MSINFO.exe

Click on Start, Search (or Find), Files and Folders
In the Named box, type the following

msinfo.exe

You should find it in the following folder

C:\Program Files\Common Files\Microsoft Shared\MSINFO

Highlight it and delete it, be sure to delete msinfo.exe, dont delete msinfo32.exe (part of the Windows files)
2) Remove the line for MSINFO.exe from Win.ini

Click on Start, Run, Type the following and Click OK

notepad c:\windows\win.ini

Remove the file about MSINFO.exe from the run line, leaving only RUN =

Click on File, Save, and close the window
3) Search for and delete BOOTCONF.exe

Click on Start, Search (or Find), Files and Folders
In the Named box, type the following

bootconf.exe
Highlight it and delete it

4) Remove the Bootconf.exe line from the Registry

Click on Start, Run, and type REGEDIT and click OK
In the left hand column, Click on the pluses (+) next to the following Registry Keys

+ HKEY_LOCAL_MACHINE
+ SOFTWARE
+ MICROSOFT
+ WINDOWS
+ CURRENT VERSION
+ RUN

In the right hand column, highlight and delete the key for

bootconf.exe

Close the Registry Editor
5) Reset the Default Home and Search Pages for Internet Explorer

Open Internet Explorer
Click on Tools
Click on Internet Options
Click on the Programs tab
Click on the button for Reset Web Settings and Click Yes
You can change your homepage under the General tab to whatever you'd like as well

6) Reboot the computer and test (global-finder.com should be gone)

copy from:
http://www.pchell.com/support/globalfinder.shtml


0

Response Number 2
Name: Tom41
Date: September 29, 2003 at 02:04:57 Pacific
Reply:

Or just download and run CWShredder to remove the CoolWebSearch hijack..

CWShredder


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: Trojan Horse-C:\bootconf.exe

Trojan Horse infecting winserv.exe www.computing.net/answers/windows-xp/trojan-horse-infecting-winservexe/21809.html

Trojan Horse in C:\System Volume Informa www.computing.net/answers/windows-xp/trojan-horse-in-csystem-volume-informa/23499.html

DLLDMT.exe and Trojan Horse Downloa www.computing.net/answers/windows-xp/dlldmtexe-and-trojan-horse-downloa/87366.html