A
A.Translator
[windows xp SP2 home]
Yesterday I was stupid enough to double click on an email attachment.
Immediately a window popped up warning me de Windows Firewall was switched off.
I switched the firewall back on
I ran an anti-virus scan
I ran Windows Defender
I ran HitmanPro which uses a large number of anti-virus and anti-spyware
programmes.
A few minor things were detected and removed.
However, the firewall still gets switched off when I restart the pc.
In c:\ I found two suspicious (?) files, one called "install.dat" with:
[install]
wt=1
extdata=ppcctoqi^^aedinvjmnm
dl=-1
stat=1
expdate=30-12-1899
expdate2=30-12-1899
act=0
regcksm=0
guid=9C170064-4F5B-4139-8137-D1AE363720C2
and one called "start.dat" with this content:
@echo off
del c:\windows\downlo~1\gb*.*
del c:\windows\downlo~1\*.g??
del c:\windows\downlo~1\g*.*
Are these two the culprits?
Can I remove them?
Is there anything else I should be looking for?
Help is much appreciated.
--
Groet,
Adriana
[ gooi de vuilnis weg als je me wilt mailen ]
www.spinsister.nl
Yesterday I was stupid enough to double click on an email attachment.
Immediately a window popped up warning me de Windows Firewall was switched off.
I switched the firewall back on
I ran an anti-virus scan
I ran Windows Defender
I ran HitmanPro which uses a large number of anti-virus and anti-spyware
programmes.
A few minor things were detected and removed.
However, the firewall still gets switched off when I restart the pc.
In c:\ I found two suspicious (?) files, one called "install.dat" with:
[install]
wt=1
extdata=ppcctoqi^^aedinvjmnm
dl=-1
stat=1
expdate=30-12-1899
expdate2=30-12-1899
act=0
regcksm=0
guid=9C170064-4F5B-4139-8137-D1AE363720C2
and one called "start.dat" with this content:
@echo off
del c:\windows\downlo~1\gb*.*
del c:\windows\downlo~1\*.g??
del c:\windows\downlo~1\g*.*
Are these two the culprits?
Can I remove them?
Is there anything else I should be looking for?
Help is much appreciated.
--
Groet,
Adriana
[ gooi de vuilnis weg als je me wilt mailen ]
www.spinsister.nl