<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Discussion on Need help getting rid of a virus! ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/discussions/101-391743/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-23T14:13:04-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[id say get a new comp]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3703511]]></link>
        <description><![CDATA[just get a new comp download same files and its fine!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3703511]]></guid>
        <dc:creator><![CDATA[the jacob]]></dc:creator>
        <pubDate>Wed, 26 Sep 2012 20:55:54 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[new drive-save the old]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3681133]]></link>
        <description><![CDATA[Not to take away anything from the tools available out there, but you might try replacing the hard drive if that is an option, reinstall a new copy of windows, update it completely and add in antivirus etc.  Put the old drive in the computer and scan it completely, then take what you need off it, (some may just be hidden or marked as system files as noted above) then stuff it in a drawer for a month.  Cleaning viruses like this can be a waste of time in many cases.  You probably could have rebuilt it many times over and truth be told, you might still have crap on there.  It isn't worth the effort.  System restore is a great place for these things to hide.  I turn it off.  You are usually better off with a backup (when possible) than system restore, as it just brings the baddies back to life when you reboot.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3681133]]></guid>
        <dc:creator><![CDATA[gdeangelis@...]]></dc:creator>
        <pubDate>Sat, 30 Jun 2012 15:48:18 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3681110]]></link>
        <description><![CDATA[sorry for responding at this late date.  something is not proficient with this newsgroup.  in any case, i have posted additional options on the webpage i provided.   please re-review it to get an idea of what they are.  however, briefly speaking you should execute a &quot;repair install&quot; with your xp cd, if the manual method for restoring the registry proved futile.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3681110]]></guid>
        <dc:creator><![CDATA[databaseben]]></dc:creator>
        <pubDate>Sat, 30 Jun 2012 11:46:40 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3680998]]></link>
        <description><![CDATA[Are you still out there?I just have a problem as I cannot open windows in safe mode. It tells me I am missing &quot;Windows\System32\Config\System&quot; and I have to start Windows with the reinstall cd. I installed the XP setup cd and followed instructions. At disk prompt I typed cd \cd windows\system32\configren system system.bakexit. I selected r for repair, the line number for the O/S, selected enter to bypass the password and at disk prompt I typed:cd \cd system~1\_resto~1\dirthe message said it could not find the file directory. I got a list of file names but nothing that said RP# or anything about restore point .]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3680998]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Fri, 29 Jun 2012 16:06:16 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3678229]]></link>
        <description><![CDATA[Hello Databaseben:I printed the instructions at the site you gave me, http://pcsmarties.wordpress.com/system-restore-via-disk-prompt/and went thru the instructions twice and both times I got to #10 and got this message &quot;cannot find the file directory. I got a list of file names but nothing that said RP# or anything about restore point .]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3678229]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Wed, 20 Jun 2012 13:59:24 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Thanks Jacoberdei]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3678207]]></link>
        <description><![CDATA[I just have a problem as I cannot open windows in safe mode. It tells me I am missing &quot;Windows\System32\Config\System&quot; and I have to start Windows with the reinstall cd. I installed the XP setup cd and followed instructions. At disk prompt I typed cd \cd windows\system32\configren system system.bakexit. I selected r for repair, the line number for the O/S, selected enter to bypass the password and at disk prompt I typed:cd \cd system~1\_resto~1\dirthe message said it could not find the file directory. I got a list of file names but nothing that said RP# or anything about restore point]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3678207]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Wed, 20 Jun 2012 11:53:25 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Seen it several times]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3676980]]></link>
        <description><![CDATA[I have run into this kind of virus a lot over the past few months. Your files are actually hidden.  Showing hidden files and folders should reveal them.You not only have malware but have a rootkit.  Sounds like you did a software system restore instead of a format and reinstall of XP.What I would do is run Tdss and then combofix.  This will terminate the rootkit.  Then (Too late now most likely) Run a system restore and restore your computer to an earlier date.  This guide covers rootkit removal and should work for you http://www.removevirus.org/remove-rootkit  Has the links to the tools I talked about.  All are free]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3676980]]></guid>
        <dc:creator><![CDATA[jacoberdei@...]]></dc:creator>
        <pubDate>Fri, 15 Jun 2012 12:10:24 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[I tried to send you the info from my site]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669616]]></link>
        <description><![CDATA[I tried to send info from my site but it didn't show up here not sure why maybe it to long also you need another computer to make these rescue CD/DVD AVG has a free Rescue CD it bootablehttp://www.avg.com/us-en/homepagehttp://www.ubcd4win.com]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669616]]></guid>
        <dc:creator><![CDATA[dayen@...]]></dc:creator>
        <pubDate>Fri, 18 May 2012 07:43:47 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669575]]></link>
        <description><![CDATA[That's a thought at this point but these guys are giving me good advice I need to know anyway.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669575]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Fri, 18 May 2012 07:02:53 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669585]]></link>
        <description><![CDATA[Hello Dayen:Well, I couldn't get as far as your site on the computer with the virus. I was here until 6:45 PM last night and that computer in safe mode was still trying to bring up the internet.This morning I can even get it to come up in Safe Mode. I am on that screen and have chosen safe mode but no response as yet. It is working tho as after I arrowed down and chose safe mode the arrow key doesn't even work.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669585]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Fri, 18 May 2012 07:01:15 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[oh my god!]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669425]]></link>
        <description><![CDATA[Buy A New Computer!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669425]]></guid>
        <dc:creator><![CDATA[sightsandsounds]]></dc:creator>
        <pubDate>Thu, 17 May 2012 14:29:12 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[File you will need for REG]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669390]]></link>
        <description><![CDATA[is FixNCR.reg  you import into Registry it take a little work because you need to place it in all users acounts so if any are not administrators then you need to set them to administrator but you must have removed the virus first  and chkdsk does not remove any virus also system recovery will only spread a virus]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669390]]></guid>
        <dc:creator><![CDATA[dayen@...]]></dc:creator>
        <pubDate>Thu, 17 May 2012 12:14:53 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Virus Removale is an art]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669368]]></link>
        <description><![CDATA[Go to my web site on another computer you will find the instruction to get rid of the virus it is a hostage virus it hide your files it has to be remove by an anti virus boot dis from a cold boot virus can live in Mem during a warm boot  also you need a program to repair the registry,my site is halloweenhackers.com, don't freek I am a white Hat]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669368]]></guid>
        <dc:creator><![CDATA[dayen@...]]></dc:creator>
        <pubDate>Thu, 17 May 2012 11:48:34 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669348]]></link>
        <description><![CDATA[it looks like you are now at the disk prompt.next press the letters followed by 2 periods and hit enter afterwards:cd..next you should see the c prompt below:c:\&gt;:next type the below to execute a check disk then hit enter afterwards:chkdsk/Fafter the utility runs above and you get the c prompt again, type the below, then press enter afterwards.   exitthen remove the cd and reboot your computer and see if you can initialize your windows again.   try both safe mode and normal mode.if however, your system does not boot up like before, then retry all the steps again to boot with the cd, execute the recovery/repair console and get back to the c prompt.then try a manual system restore.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669348]]></guid>
        <dc:creator><![CDATA[databaseben]]></dc:creator>
        <pubDate>Thu, 17 May 2012 11:28:00 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Need help getting rid of a virus!]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669364]]></link>
        <description><![CDATA[I followed your advice and hit enter this time when it asked for administrator password.Now it says C:\WINDOWS and is waiting for me to type something. I hit enter but thats not what it wants?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669364]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Thu, 17 May 2012 11:10:00 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669354]]></link>
        <description><![CDATA[response #2 - in regards to installing a new o.s., there is always a possibility that you have a boot virus - but we don't really know what kind of infection you had or have.i'm basing my suggestions for executing a manual restore on the presumption that your anti virus did zap the initial infection and you simply need to restore missing or corrupted system files.however, if all your efforts to salvage what you have fail, you can install xp from scratch.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669354]]></guid>
        <dc:creator><![CDATA[databaseben]]></dc:creator>
        <pubDate>Thu, 17 May 2012 10:43:41 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669353]]></link>
        <description><![CDATA[just click the enter key to bypass the questions, that is if you were usually logging into windows automatically and without entering any password to begin with.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669353]]></guid>
        <dc:creator><![CDATA[databaseben]]></dc:creator>
        <pubDate>Thu, 17 May 2012 10:40:02 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Need help getting rid of a virus!]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669342]]></link>
        <description><![CDATA[I selected number 1 but once it got to the part it asked for the administrator password I tried every password I've ever used and they were all wrong. It asked if I wanted to Reboot which I did. This computer is about 6 years old and if I ever put a password in I will never know.If I follow your instructions and just install a new os won't the virus still be in the old o/s and could it get into the new?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669342]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Thu, 17 May 2012 10:19:28 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669299]]></link>
        <description><![CDATA[its usually number 1, if you only have one o.s. on the system.  if you had two o.s's, then you could either press number 1 or 2 to select which one to log into.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669299]]></guid>
        <dc:creator><![CDATA[databaseben]]></dc:creator>
        <pubDate>Thu, 17 May 2012 09:53:30 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Need help getting rid of a virus!]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669325]]></link>
        <description><![CDATA[The computer I am working on is a pc. I went ahead and stopped the setup and started over. When I got to the part I could choose Repair I did. Now it is asking me &quot;Which Windows installation would you like to log on to&quot;. Not sure what they want.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/101-391743-3669325]]></guid>
        <dc:creator><![CDATA[petryss]]></dc:creator>
        <pubDate>Thu, 17 May 2012 09:35:09 -0700</pubDate>
    </item>
    </channel>
</rss>

