Results 1 to 10 of 10
  1. #1
    4 Star Lounger
    Join Date
    Apr 2001
    Posts
    482
    Thanks
    0
    Thanked 0 Times in 0 Posts

    After cleaning PC still looks for virus

    I recently found myself infected by a Hacktool.Rootkit virus. After finding my Symantec Antivirus could not find and remove the file, I was able to successfully use an online scanning tool from F-Secure, which found and cleaned the file, which was named "Microsoft.exe".

    However, I found that when I, and a coworker, tried to remap a drive, we get a message that says it cannot find microsoft.exe. This is, of course, a good thing as it means that the virus infected file is gone. However, I cannot seem to it to stop looking for this file. I tried removing references to the file in the registry, but every time I try to map the drive, it reinserts the entries into the registry.

    I tried looking for references in the File Types dialog as referenced in the MS Knowledge Base, but I could not find a relevant file type that referenced this.

    Any ideas how I get my laptop to stop looking for microsoft.exe?

    Thanks!!
    Troy

  2. #2
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,584
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: After cleaning PC still looks for virus

    Repair your OS. Reads as though one of the operating system files has been replaced.

    Joe
    Joe

  3. #3
    4 Star Lounger
    Join Date
    Apr 2001
    Posts
    482
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: After cleaning PC still looks for virus

    There is no OS file called "microsoft.exe". This was simply a smartly named virus infected file. As I said, it has been removed. However, part of the process of this virus was obviously to look for the file when you map to a new network drive (which is where this file came from). That looking for the file is what I am trying to stop.

    Thanks!!
    Troy

  4. #4
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,584
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: After cleaning PC still looks for virus

    I understand that the microsoft.exe is not an operating system file. I'm saying that the virus/trojan may have altered a system file. I don't know what system files (.exe or .dll) are involved in drive mapping. So a repair install may fix it.

    Joe
    Joe

  5. #5
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: After cleaning PC still looks for virus

    You might want to take a look here and try the free scan that is offered for .microsoft errors. Or check out this Google search for some insight.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  6. #6
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: After cleaning PC still looks for virus

    Further searching turned up this Symantec page with instructions for removal.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  7. #7
    4 Star Lounger
    Join Date
    Apr 2001
    Posts
    482
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: After cleaning PC still looks for virus

    Thanks, but this is the first thing I tried. The scan never found the files that were infected. I.E. It doesn't work, at least not for me or anyone else who tried it.

    Only the scan at F-Secure found and cleaned the affected files.

    Thanks any way!!

  8. #8
    3 Star Lounger
    Join Date
    Jun 2001
    Location
    Irvine, California, USA
    Posts
    292
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: After cleaning PC still looks for virus

    Since there is a leftover reference you may want to try CCleaner and/or another registry cleaner and perform some standard maintenance after by running CHKDSK and SFC. Also many times these little nasties can only be removed in safe mode and system restore needs to be turned off to be cleared. Good Luck.

  9. #9
    4 Star Lounger
    Join Date
    Apr 2001
    Posts
    482
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: After cleaning PC still looks for virus-SOLVED

    All,
    I think I found the problem. In doing some searching for “microsoft.exe” on my own hard-drive, I came across a file at the root of my C: drive called “autorun.inf” that automatically was to try to seek out “microsoft.exe”. There was no other information in this file other than that referring to “microsoft.exe”. Thus, I deleted the file.

    I still experience the error I mentioned when mapping to the drive. So I went and looked, and guess what? That same autorun.inf file was also located at the root of the V and W drives. That, evidently, was the problem.

    I deleted those files and now I can map to V and W without getting that error.

    Enjoy!!
    Troy

  10. #10
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: After cleaning PC still looks for virus-SOLVED

    Well done. <img src=/S/thumbup.gif border=0 alt=thumbup width=15 height=15>

    Thanks for posting back with the solution.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •