RE: [OT] I think I have a virus
- Posted by Greg Haberek <ghaberek at wowway.com> Aug 18, 2004
- 518 views
> As far as the group policy helping with virus and > spyware removal, its much improved since Windows 2000. > You can tell Windows to include file types other than > just .exe. Some of the spyware sets the security so > tight, you can't even view the security tab while it > is running, much less delete it. To get to the > software retrictions, run MMC. Go to File, Add/Remove > Snap In. Then click the Add button. Select Group > Policy, click Add, Finish, Close, and OK. Open Local > Computer Policy, Computer Configuration, Windows > Settings, Security Settings, Software Restrictions. > Double click Enforcement to bring up the options. > Select All Software Files, and All Users and click ok. > Then, open up the Security Levels folder, Right click > on Disallowed, and click set as default. Then we want > to open the Additional Rules folder. Right click in a > blank spot for the rules and select New Hash Rule. > Click the browse button and point it to > C:\Windows\System32\iets32.exe. It should > automatically set it to Disallowed, wich is what we > want. We also want to create a new hash rule for > C:\WINDOWS\System32\msdxm.ocx, > C:\WINDOWS\system32\rundll32.vbe. Ok, I totally foobar-ed my computer. I did what was mentioned above, and when I restarted and logged on, Windows logged me right off. I tried logging in as Administrator, same thing. So I booted into Safe Mode and removed all the settings, restarted, same problem. I'm posting this from my laptop. (mmmmm.... Fedora :) If it weren't for the homework I need to do in VB, and the programs people want me to write *in Windows* I'd strip down that hard drive and install Fedora Core 2. Grrrr.... Stupid Spyware.... ~Greg