SRAW
Rocket Man
2007 Nov 6 • 2525
601 ₧
|
I got some lame virus that started a bunch of processes called winlogon running under system priveldges, and now I shall document my removal of this.I think that it was a backdoor or something since it didn't do anything noticable
1. I restarted my pc, but the stupid thing comes up, so I close my internet connection, and then check regedit and find the path of it in the startup registry. I tried to delete it but then it suddenly pops back up.
2. I go to the directory (c:/windows/system32/winlogon/winlogon.exe) and scan the program there for viruses, stupid virus program doesn't get it.
3. I try ending the processes then quickly delete the program, but i get the stupid critical system process error
4. I rename the file, then suddenly another clone of it pops up, so what do I do? I renamed it then before another clone popped up I quickly turned off the power to my pc, then I turned on my pc and it's fixed! I feel so proud of myself 
|
|
|
|
|
≡
|
2010 Jul 8 at 12:18 UTC
|
|
|
Down Rodeo
Cap'n Moth of the Firehouse
2007 Oct 19 • 5486
57,583 ₧
|
I wouldn't be so sure that it is fixed: winlogon is a critical component. I imagine that originally the virus will have infected winlogon.exe and has now backed itself up to another part of the drive. Because if you have deleted all copies of winlogon, your computer won't start :p
|
|
|
|
|
≡
|
2010 Jul 8 at 20:07 UTC
|
|
|
SRAW
Rocket Man
2007 Nov 6 • 2525
601 ₧
|
|
|
|
|
|
≡
|
2010 Jul 9 at 02:00 UTC
|
|
|
|
I noticed I had the same problem on all my computers!
So I did the same things you said and not only did it fix the computers' problems but cookies and sherbet came out!
So I got my computers all clean and a fantastic dessert!
|
|
|
|
|
≡
|
2010 Jul 9 at 02:49 UTC
|
|
|
|
SRAW said: Don't worry it's boken
|
|
|
|
|
≡
|
2010 Jul 9 at 02:49 UTC
|
|
|
Rockbomb
Dog fucker (but in a good way now)
2009 Nov 14 • 2045
|
superjer said: I noticed I had the same problem on all my computers!
So I did the same things you said and not only did it fix the computers' problems but cookies and sherbet came out!
So I got my computers all clean and a fantastic dessert!
I just tried, and didn't get any cookies/sherbert 
Maybe I gotta restart my comp first for it to take effect, lemme try...
|
|
|
|
|
≡
|
2010 Jul 9 at 03:02 UTC
|
|
|
SRAW
Rocket Man
2007 Nov 6 • 2525
601 ₧
|
superjer said: I noticed I had the same problem on all my computers!
So I did the same things you said and not only did it fix the computers' problems but cookies and sherbet came out!
So I got my computers all clean and a fantastic dessert!
Cookies ??  None came out for me :(
|
|
|
|
|
≡
|
2010 Jul 9 at 03:02 UTC
|
|
|
buq25
2008 Jul 5 • 583
295 ₧
|
I've also removed a virus without antivirus programs! I clicked the "my computer button", went to (C:) and pressed, in this order, Ctrl A, Ctrl Alt Del.
It took a while and now I'm on my other computer and waiting for it to restart itself to make sure it's working as it should.
Today's post brought to you by the letter: "heck".
|
|
|
|
|
≡
|
2010 Jul 9 at 13:21 UTC
|
|
|
aaronjer
*****'n Admin
2005 Mar 21 • 5105
1,227 ₧
|
Did SRAW really just successfully troll DR? Wow! Way to go, SRAW!
|
|
|
|
|
≡
|
2010 Jul 9 at 21:33 UTC
|
|
|
Down Rodeo
Cap'n Moth of the Firehouse
2007 Oct 19 • 5486
57,583 ₧
|
I'm probably quite easy to troll, I imagine, but have I just been?
|
|
|
|
|
≡
|
2010 Jul 10 at 00:11 UTC
|
|
|
Rockbomb
Dog fucker (but in a good way now)
2009 Nov 14 • 2045
|
|
|
|
|
|
≡
|
2010 Jul 10 at 01:37 UTC
|
|
|
aaronjer
*****'n Admin
2005 Mar 21 • 5105
1,227 ₧
|
You appeared to take his virus story seriously. As in, you believed he had a virus at some point.
|
|
|
|
|
≡
|
2010 Jul 10 at 01:40 UTC
— Ed. 2010 Jul 10 at 01:41 UTC
|
|
|
|
Why am I still around?
|
|
|
|
|
≡
|
2010 Jul 10 at 07:20 UTC
|
|
|
SRAW
Rocket Man
2007 Nov 6 • 2525
601 ₧
|
It's not like I made up my whole story just to troll on dr
|
|
|
|
|
≡
|
2010 Jul 10 at 09:35 UTC
|
|
|
|
...and that's the bottom line because Mate de Vita said so.
|
|
|
|
|
≡
|
2010 Jul 10 at 09:41 UTC
|
|
|
Down Rodeo
Cap'n Moth of the Firehouse
2007 Oct 19 • 5486
57,583 ₧
|
aaronjer said: You appeared to take his virus story seriously. As in, you believed he had a virus at some point.
As much is this is the internet on which disbelief should be the natural instinct, there was nothing particularly strange about his story. winlogon is often targeted by viruses, SRAW appears to download material which could be infected with viruses... Then "fixes" it by doing
HOLY SHIT was this some attempt to troll me right now?! You're so meta!
|
|
|
|
|
≡
|
2010 Jul 10 at 15:04 UTC
|
|
|
aaronjer
*****'n Admin
2005 Mar 21 • 5105
1,227 ₧
|
BUI KICHWA!
|
|
|
|
|
≡
|
2010 Jul 11 at 05:11 UTC
|
|
|
|
...1st?
I drink to forget but I always remember.
|
|
|
|
|
≡
|
2010 Jul 11 at 14:05 UTC
|
|
|
|
I'd like to second BUI KICHWA.
|
|
|
|
|
≡
|
2010 Jul 13 at 00:51 UTC
|
|
|
SRAW
Rocket Man
2007 Nov 6 • 2525
601 ₧
|
|
|
|
|
|
≡
|
2010 Jul 13 at 05:23 UTC
|
|
|
|
|
|
BUI KICHWA:
...and that's the bottom line because Mate de Vita said so.
|
|
|
|
|
≡
|
2010 Jul 13 at 11:19 UTC
|
|
|
|
|
|
|
|
|
≡
|
2010 Jul 13 at 22:34 UTC
|
|
|
Down Rodeo
Cap'n Moth of the Firehouse
2007 Oct 19 • 5486
57,583 ₧
|
Sprinkles, you've been a bit quiet recently. You're not cheating on us with another forum, are you?
|
|
|
|
|
≡
|
2010 Jul 13 at 23:32 UTC
|
|
|
|
|
|
|
|
|
≡
|
2010 Jul 14 at 01:42 UTC
|
|
|
|
