B
bnborg
After trying multiple times to clear an infestation I noticed that beep.sys
in %SystemRoot%\system32\drivers was not signed. I booted my WinPE cd and
copied the right beep.sys that I had expanded from Service Pack 3, from a usb
drive. This cleared the problem.
The problem had several symptoms but the most annoying was a red systray
icon that kept popping up a balloon saying that my computer was infected and
I should register "XP AntiVirus" so that I could clean the virus. This was,
of course, false. I ran MRT three times and also used the Windows Live
online scanner. They said they had fixed the problem but it kept
re-appearing.
Mrt.log had entries such as:
Found virus: TrojanDownloader:Win32/Renos in
file://C:\WINNT\system32\brastk.exe
and
For cleaning TrojanDownloader:Win32/Renos, the system needs to be restarted.
in %SystemRoot%\system32\drivers was not signed. I booted my WinPE cd and
copied the right beep.sys that I had expanded from Service Pack 3, from a usb
drive. This cleared the problem.
The problem had several symptoms but the most annoying was a red systray
icon that kept popping up a balloon saying that my computer was infected and
I should register "XP AntiVirus" so that I could clean the virus. This was,
of course, false. I ran MRT three times and also used the Windows Live
online scanner. They said they had fixed the problem but it kept
re-appearing.
Mrt.log had entries such as:
Found virus: TrojanDownloader:Win32/Renos in
file://C:\WINNT\system32\brastk.exe
and
For cleaning TrojanDownloader:Win32/Renos, the system needs to be restarted.