System32 Net Stop.

  • Thread starter Thread starter Andy
  • Start date Start date
A

Andy

Since an attempted virus attack on my computer a message on a DOS type
screen
flashes up on my computer after it is rebooted. It is headed:-
"Windows Media Player"
It then says something like
C:\Windows\"System32> NET STOP security center..... " the final part I have
never been able to take in.
Also Norton Auto Protect is now always off and has to be manually
selected. A system scan did not find any problems and I have run all my
spyware protection programmes.
Andy.
 
Andy said:
Since an attempted virus attack on my computer a message on a DOS type
screen
flashes up on my computer after it is rebooted. It is headed:-
"Windows Media Player"
It then says something like
C:\Windows\"System32> NET STOP security center..... " the final part I have
never been able to take in.
Also Norton Auto Protect is now always off and has to be manually
selected. A system scan did not find any problems and I have run all my
spyware protection programmes.
Click to expand...

i don't know how many products detect this yet, but it sounds like
you've encountered one of those microsoft DRM hacks (trojans in media
files) and it looks like it's trying to shut down your windows xp sp2
security("net stop" is used to stop services from running), which i
believe is supposed to coordinate things like your anti-virus and your
firewall and that sort of thing...
 
kurt wismer said:
i don't know how many products detect this yet, but it sounds like you've
encountered one of those microsoft DRM hacks (trojans in media files) and
it looks like it's trying to shut down your windows xp sp2 security("net
stop" is used to stop services from running), which i believe is supposed
to coordinate things like your anti-virus and your firewall and that sort
of thing...

--
"maxwell can tell he's in hell
just wants you to visit him there
same old game that he's playin'
his rules are never fair"
Click to expand...

I tried RUN MSCONFIG to see what was happening at start up it just flashes
on to the screen for a moment and does lot let me do anything.
Andy
 
Andy said:
I tried RUN MSCONFIG to see what was happening at start up it just
flashes on to the screen for a moment and does lot let me do anything.
Click to expand...

that definitely sounds suspicious to me... try restarting in safe-mode
and then looking through msconfig...
 
kurt wismer said:
that definitely sounds suspicious to me... try restarting in safe-mode and
then looking through msconfig...

--
"maxwell can tell he's in hell
just wants you to visit him there
same old game that he's playin'
his rules are never fair"
Click to expand...
The only suspicious MSCONFIG entry was one with where the file name was
blank so I deleted that one but the problem remains. When in the operating
system REGEDIT and MSCONFIG just flash up on the screen for a few moments.
Andy.
 
Andy said:
The only suspicious MSCONFIG entry was one with where the file name was
blank so I deleted that one but the problem remains. When in the
operating system REGEDIT and MSCONFIG just flash up on the screen for a
few moments.
Click to expand...

well, since you originally indicated that the dialog mentioned windows
media player, did you find any reference to windows media player when
you looked through msconfig?

y'know what? this could go back and forth for some time so i'm going to
do something i've never done before - i'm going to suggest you get
hijack this (http://www.tomcoyote.org/hjt/), save the log and post it
here... you may or may not have to do it from safemode - it depends on
whether the malware tries to disable it... you'll just have to try and
see..
 
Back
Top