- Malicious removal tool will not run on XP computer
- Posted by Kleesg on May 5th, 2008
A virus has caused the MRT command to somehow disable. It also disabled the
task manager. I have re-enabled the task manager and the virus is gone, but
MRT will not run. A the command line, msconfig runs fine, but when you type
MRT and hit enter nothing happens. XP Pro, all windows updates have run.
- Posted by nass on May 5th, 2008
"Kleesg" wrote:
You failed to mention what the virus is/are and how did you know that you
got a virus?
Re-enabling the task manager will not rid you of the virus you will need a
thorough scan with an anti-virus software with up2date definitions.
Go through these cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .
Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
http://onecare.live.com/site/en-gb/d....htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run disk clean up and Defrag in safe mode.
HTH.
nass
---
http://www.nasstec.co.uk
- Posted by Kleesg on May 5th, 2008
The virus was found by Norton anti virus and removed by the user before I
could review. I do not know what the name of the virus was, but the history
shows SMGFTBMT.DLL was the infected file. I will try what you have
recommended and let you know. Thanks
"nass" wrote:
- Posted by Jim on May 5th, 2008
"Kleesg" <Kleesg@discussions.microsoft.com> wrote in message
news:09B512AB-0188-4401-9C97-582C55C64EF5@microsoft.com...
Is MRT still present? It should be located in \windows\system32.
Jim
- Posted by Kleesg on May 6th, 2008
I followed the instructions and everything works great! Thanks nass!!!
"Jim" wrote:
- Posted by nass on May 6th, 2008
Hi K,
All clean or you need more help?
You can run this hiackthis and send me the log to analysis it for you, as
SMGFTBMT.DLL it is n't located or mentioned on a search engine either, so it
is a viral file.
(http://www.trendsecure.com/portal/en...hijackthis.php)
Can you please send me a copy at to_you_rossREMOVETHIS@yahoo.co.uk , remove
the obvious to email me.
nass
----
http://www.nasstec.co.uk
"Kleesg" wrote:
