+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Windows Thread, On-going problem in Technical; Oh look! A technical question!! A while back i posted that i'd had a virus which had been cleaned up, ...
  1. #1

    Little-Miss's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    5,569
    Thank Post
    2,388
    Thanked 754 Times in 462 Posts
    Blog Entries
    2
    Rep Power
    544

    On-going problem

    Oh look! A technical question!!

    A while back i posted that i'd had a virus which had been cleaned up, but i had been left with a little bit of mess afterwards.

    The only thing that people could suggest to do was reimage the machines. I hadnt got round to that yet as it was just a few annoying pop-ups on logon which didnt affect anything.

    But over this time ive noticed a trend, it actually seems to be user related not machine related. I imaged a laptop yesterday and as soon as i logged the user on there they were! (she was one that was originally affected).

    Is there something i can do about this, i tried deleting the roaming profile and the profile off a machine but it didnt work. But i may have done this in the wrong order etc....

    Any ideas?

    I have screen grabs of errors, just got to gt them on here...

  2. #2

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,177
    Thank Post
    217
    Thanked 1,291 Times in 801 Posts
    Blog Entries
    4
    Rep Power
    512
    I'd also be concerned that maybe whatever's infected you is still hanging around infecting other machines...

    what virus is it? got a name from any of the AV vendors?

  3. Thanks to Domino from:

    Little-Miss (28th January 2010)

  4. #3

    Little-Miss's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    5,569
    Thank Post
    2,388
    Thanked 754 Times in 462 Posts
    Blog Entries
    2
    Rep Power
    544
    W32/Lurka-A

    It seemed to be on peoples Memory sticks. I get emails from our sophos telling me its found it and deleted it but dont get any anymore.

    Will check this out again then.

    but why only certain profiles?

  5. #4
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,490
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    51
    Did you delete all instances of the profile? server and locally?

  6. Thanks to p858snake from:

    Little-Miss (28th January 2010)

  7. #5
    pwds's Avatar
    Join Date
    Dec 2008
    Location
    Derby
    Posts
    279
    Thank Post
    73
    Thanked 48 Times in 38 Posts
    Rep Power
    20
    So I don't spend hours hunting through your seven hundred odd posts for the error- can you point me towards that thread? Error messages when logging on on all profiles is something I just dealt with and might be able to solve for you if it's what I'm thinking of- likewise these didn't actually cause any issues, just concerns for users.

  8. #6

    Little-Miss's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    5,569
    Thank Post
    2,388
    Thanked 754 Times in 462 Posts
    Blog Entries
    2
    Rep Power
    544
    i'm sure i did, but shall try it again....

  9. #7

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    395
    Do you have redirected Application Data directories that are stored outside of the roaming profiles?

  10. #8

    Little-Miss's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    5,569
    Thank Post
    2,388
    Thanked 754 Times in 462 Posts
    Blog Entries
    2
    Rep Power
    544
    Excuse my ignorance....EH!?

    I think the answer is no. lol

    Inside the individual profile folders there is an application data folder, but thats not what you asked

  11. #9

    Little-Miss's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    5,569
    Thank Post
    2,388
    Thanked 754 Times in 462 Posts
    Blog Entries
    2
    Rep Power
    544
    Quote Originally Posted by pwds View Post
    So I don't spend hours hunting through your seven hundred odd posts for the error- can you point me towards that thread? Error messages when logging on on all profiles is something I just dealt with and might be able to solve for you if it's what I'm thinking of- likewise these didn't actually cause any issues, just concerns for users.

    Errors leftover from virus removal

    My errors are as follows!

    Windows cannot find 'C:\windows\inf\other.exe' make sure you typed the name correctly and then try again......

    Windows cannot find 'C:\windows\system32\winsit.exe' make sure you typed the name correctly and then try again......

    could not load or run 'C:\windows\inf\other.exe' specified in the registry. make sure the files exist on your computer or remove the reference to it from the registry

    Windows cannot find 'C:\windows\system32\config\win.exe' make sure you typed the name correctly and then try again......

    could not load or run 'C:\windows\system32\config\win.exe' specified in the registry. make sure the files exist on your computer or remove the reference to it from the registry
    I did check the registry but shall try again as i havent dealt with this for a few weeks so cant really remember.

  12. #10

    LosOjos's Avatar
    Join Date
    Dec 2009
    Location
    West Midlands
    Posts
    5,498
    Thank Post
    1,456
    Thanked 1,201 Times in 814 Posts
    Rep Power
    712
    Can't you just delete them from startup in msconfig? Or maybe even the 'Start Menu -> Startup' folder as it seems to be user related. Or am I missing the point?

  13. #11
    pwds's Avatar
    Join Date
    Dec 2008
    Location
    Derby
    Posts
    279
    Thank Post
    73
    Thanked 48 Times in 38 Posts
    Rep Power
    20
    The paths are different but the error messages extremely similar to one I dealt with yesterday- in that case it was a WSUS install of IE7 that hadn't completed correctly. Add-ons were also disabled when running from the embedded desktop icon (although not a shortcut to %ProgramFiles%\Internet Explorer\iexplore.exe).

    Re-installing IE7 manually resolved the issue. I also updated Windows Update Agent manually at the same time, so it's possible that helped- although I am leaning towards IE as the fix.

    Might be worth looking at software versions on machines that are affected, obviously IE is a prime candidate to start with but anything deployed by WSUS, requiring a restart and used before the restart may well be corrupt.

  14. Thanks to pwds from:

    Little-Miss (28th January 2010)

  15. #12

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,381
    Thank Post
    181
    Thanked 211 Times in 171 Posts
    Rep Power
    65
    Grab a copy of Starter - CodeStuff :: Starter - and work out where they are lurking first, then try and trace it back to figure out what's still adding that to the profile.

  16. Thanks to OutToLunch from:

    Little-Miss (28th January 2010)

  17. #13

    Little-Miss's Avatar
    Join Date
    Oct 2007
    Location
    London
    Posts
    5,569
    Thank Post
    2,388
    Thanked 754 Times in 462 Posts
    Blog Entries
    2
    Rep Power
    544
    Quote Originally Posted by JoshJohnson View Post
    Can't you just delete them from startup in msconfig? Or maybe even the 'Start Menu -> Startup' folder as it seems to be user related. Or am I missing the point?
    well no, that didnt cross my mind....i do apologise...

  18. #14

    LosOjos's Avatar
    Join Date
    Dec 2009
    Location
    West Midlands
    Posts
    5,498
    Thank Post
    1,456
    Thanked 1,201 Times in 814 Posts
    Rep Power
    712
    Quote Originally Posted by Little-Miss View Post
    well no, that didnt cross my mind....i do apologise...
    Not sure if that was directed at me or not, if it was, then apologies for coming across as un-friendly, it wasn't my intention

  19. Thanks to LosOjos from:

    Little-Miss (28th January 2010)

  20. #15

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    What I would advise you do is create a new profile for people on the server, but name it jbloggs1 or jbloggs2 for example, make it unique. I suspect users are logging onto infected workstations, then the cached bad profile is being re-uploaded back to the server. Hope this makes sense.

    I would then proceed and re-image workstations in batches where possible. You're sure to get better results.

  21. Thanks to Michael from:

    Little-Miss (28th January 2010)

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Exchange 2003 problem/profile problem?
    By Japtastic in forum Windows Server 2000/2003
    Replies: 4
    Last Post: 30th September 2009, 05:41 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •