Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account



Photo

What is this nagging C:\WINDOWS\is-B0DS7.exe?

- - - - -

  • Please log in to reply
5 replies to this topic

#1
jnathan

jnathan

    Newbie

  • Member
  • 13 posts
  • Joined 15-May 05
Today afterconnecting a thumb drive with this PC, the AV showed and cleaned the backdoor Trojan.
But now a message appears just after the welcome screen and want me to click ok every time I log in to XP.
Whats this "is-B0DS7.exe" image attached. How can I remove this message?

Attached Files




How to remove advertisement from MSFN

#2
Sp0iLedBrAt

Sp0iLedBrAt

    MSFN Addict

  • MSFN Sponsor
  • 1,727 posts
  • Joined 19-March 09
  • OS:XP Pro x86
  • Country: Country Flag
Just open msconfig through Start->Run and find the process in the Startup or Services tab. Then untick it and it should solve the problem.

You could also open Regedit through Start->Run and find the process name and delete it, but only if you know what you're doing. A back-up is also recommended.

#3
jnathan

jnathan

    Newbie

  • Member
  • 13 posts
  • Joined 15-May 05
Can you locate me the exact entry where its situated in msconfig? I dont seem to find it exactly.
there is no such entry inside msconfig. Any other way? O googled, No result. Strange !!!

#4
Tripredacus

Tripredacus

    K-Mart-ian Legend

  • Super Moderator
  • 9,921 posts
  • Joined 28-April 06
  • OS:Server 2012
  • Country: Country Flag

Donator

You didn't get a result likely because the filename is "randomly" generated. There are two ways to find the program that is starting:

1. MSCONFIG on the Startup Tab.
2. In the Registry "Run"

If you are not comfortable with editing the registry, you can use CCleaner. On the Startup section, it not only shows you things from the Startup Folder, it can also show things that do not appear in MSCONFIG.
MSFN RULES | GimageX HTA for PE 3-5 | lol probloms
msfn2_zpsc37c7153.jpg

#5
submix8c

submix8c

    Inconceivable!

  • Patrons
  • 4,338 posts
  • Joined 14-September 05
  • OS:none specified
  • Country: Country Flag
Also, you could download and install SpybotSnD, switch to Advanced Mode, and look at Startup Items. You can disable, delete any extras/unwanted there - suggest disable and see if adverse affects or re-appears. Be aware that it does similar to CCleaner but in a different way, i.e. SpyBot simply "disables" and/or "deletes", whereas CCleaner should backup the entry prior to deletion giving the ability to "reload". Same principle, different method. CCleaner is smaller and does not scan for Spyware, etc.

Look them up to see what is featured and decide... Hope you didn't contract more; I had a recent "drive-by" and had a booger of a time eradicating it.

(should be moved to "malware" section?)

Edited by submix8c, 15 December 2009 - 01:25 PM.

Someday the tyrants will be unthroned... Jason "Jay" Chasteen; RIP, bro!

Posted Image


#6
jnathan

jnathan

    Newbie

  • Member
  • 13 posts
  • Joined 15-May 05
It worked ! Thanks all. I unchecked the entry from Spybot S&D and its working.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users