Re: c:\windows\system32\netdc.exe

From: DDM (DDMara_at_YaNOSPAMhoo.com)
Date: 07/26/04 

Date: Mon, 26 Jul 2004 14:29:41 -0400

Phil, Carey, Will:

I appreciate your taking the time to respond. Thank you all very much. 

-- 
DDM
"Phil" <I.fix.probs@for.you> wrote in message
news:%237FeaAzcEHA.3016@tk2msftngp13.phx.gbl...
> Netdc.exe is related to a virus. I just spent five hours this weekend
trying
> to remove it from relatives machine and I could not get rid of it. Nothing
> touched it or if it did, it soon came back, sometimes as a differernt
name,
> like st.exe or netda.exe or netdb.exe. I could not figure out how to stop
it
> from reloading and found very little info on google or symantecs site
about
> it. See if this helps you(it didn't really help me, we eventually just
> formatted and reinstalled). Sounds like you may have gotten rid of the
> netdc.exe and now the references are just left, so maybe this will help.
> FYI - I did get rid of the virus several times with anti-virus programs
and
> manually, but it kept coming back, not sure how. This computer had the a,
b,
> and c variants.
>
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nibu.e.html
>
> DDM wrote:
> > Running Windows XP Home on a Dell Dimension Desktop, all critical
> > updates installed.
> >
> > Recently, whenever I start Windows, right after I enter my password,
> > I get a warning beep. When the Welcome screen disappears, I see the
> > following error message on screen: "Windows cannot find the file
> > c:\windows\system32\netdc.exe."
> >
> > I don't know what this file is, or why it is being called. I ran
> > Webroot Spysweeper and deleted all ad/spyware it found. Then I ran
> > Norton Antivirus and it found nothing. I checked my Startup group and
> > it is empty. Ran Msconfig and inspected my startup settings and all
> > seems normal. I tried to run System Restore to go back to a point
> > before this started happening but System Restore couldn't do it.
> > Finally, I tried starting in Safe Mode. I still get the error.
> >
> > I looked at my other Dell Dimension, which has pretty much the same
> > configuration but is behaving normally, and there is no such file on
> > it, hidden or otherwise.
> >
> > Other than my getting the error message, all seems normal. I'm having
> > no problems with the OS, or with running any software (primarily MS
> > Office 2003). But it's annoying.
> >
> > Does anyone have any idea what this is all about?
> >
> > Thanks in advance.
>
>

Relevant Pages

  • Re: Hijacked Internet Connection!
    ... D/load HiJack This from here: ... Microsoft MVP - Windows Shell/User ... > offering help to get rid of a virus it had supossedly ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Opening WIndows.
    ... The Sasser virus was one of them (Which among other ... I haven't had that error message before, ... Where are you, Windows ... >> on saving as jpg. ...
    (microsoft.public.windowsxp.general)
  • RE: Malicious Software Removal Tool Errors Reported
    ... months of running and I was concerned that there might be a virus. ... Windows has loaded I cannot open any anti-virus utilities, ... Also try to check the Event Viewer log for error as this not good new if you ... Look in the right Pane/window for error message with red or Yellow ...
    (microsoft.public.windowsxp.general)
  • Re: removing trojan horse virus
    ... There is a very helpful virus removal newsgroup you may wish to post to: ... Windows XP - Shell/User ... I'd like to get rid of this virus. ... How do I go about uninstalling Windows XP if this is a resonable option ...
    (microsoft.public.windowsxp.help_and_support)
  • DVD RW drive not working after computer virus
    ... I had the virtuemonde virus on my sony vaio pcv rs520. ... an online antivirus scan in safe mode, windows xp would not load, it took 9 ... I finally got rid of it. ... in the second dvd rom drive and it plays perfectly in windows media player. ...
    (microsoft.public.windowsxp.hardware)