Re: c:\windows\system32\netdc.exe

From: Will Denny (willdenny_at_mvps.org)
Date: 07/26/04


Date: Mon, 26 Jul 2004 19:34:12 +0100

You're welcome.

-- 
Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups
"DDM" <DDMara@YaNOSPAMhoo.com> wrote in message news:eX1EG6zcEHA.556@tk2msftngp13.phx.gbl...
> Phil, Carey, Will:
> 
> I appreciate your taking the time to respond. Thank you all very much.
> 
> -- 
> DDM
> 
> "Phil" <I.fix.probs@for.you> wrote in message
> news:%237FeaAzcEHA.3016@tk2msftngp13.phx.gbl...
>> Netdc.exe is related to a virus. I just spent five hours this weekend
> trying
>> to remove it from relatives machine and I could not get rid of it. Nothing
>> touched it or if it did, it soon came back, sometimes as a differernt
> name,
>> like st.exe or netda.exe or netdb.exe. I could not figure out how to stop
> it
>> from reloading and found very little info on google or symantecs site
> about
>> it. See if this helps you(it didn't really help me, we eventually just
>> formatted and reinstalled). Sounds like you may have gotten rid of the
>> netdc.exe and now the references are just left, so maybe this will help.
>> FYI - I did get rid of the virus several times with anti-virus programs
> and
>> manually, but it kept coming back, not sure how. This computer had the a,
> b,
>> and c variants.
>>
> http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nibu.e.html
>>
>> DDM wrote:
>> > Running Windows XP Home on a Dell Dimension Desktop, all critical
>> > updates installed.
>> >
>> > Recently, whenever I start Windows, right after I enter my password,
>> > I get a warning beep. When the Welcome screen disappears, I see the
>> > following error message on screen: "Windows cannot find the file
>> > c:\windows\system32\netdc.exe."
>> >
>> > I don't know what this file is, or why it is being called. I ran
>> > Webroot Spysweeper and deleted all ad/spyware it found. Then I ran
>> > Norton Antivirus and it found nothing. I checked my Startup group and
>> > it is empty. Ran Msconfig and inspected my startup settings and all
>> > seems normal. I tried to run System Restore to go back to a point
>> > before this started happening but System Restore couldn't do it.
>> > Finally, I tried starting in Safe Mode. I still get the error.
>> >
>> > I looked at my other Dell Dimension, which has pretty much the same
>> > configuration but is behaving normally, and there is no such file on
>> > it, hidden or otherwise.
>> >
>> > Other than my getting the error message, all seems normal. I'm having
>> > no problems with the OS, or with running any software (primarily MS
>> > Office 2003). But it's annoying.
>> >
>> > Does anyone have any idea what this is all about?
>> >
>> > Thanks in advance.
>>
>>
> 
> 
>


Relevant Pages

  • Re: RPC
    ... phil wrote: ... Then immediately turn-on Windows XP's built-in Firewall. ... Blaster Worm: Critical Security Patch for Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: App close.....additional info
    ... Glad you have it all sorted, Phil and you are most welcome. ... 2004 Windows MVP "Winny" Award ... Taskbar Repair Tool Plus! ... >Taskbar Repair Tool Plus! ...
    (microsoft.public.windowsxp.general)
  • Re: Missing or corrupted ntoskrnl.exe (recent SP2 update)
    ... Phil Preen wrote: ... There uncheck 'automatically restart'. ... but there is no driver name displayed. ... > I am also now repeatedly getting a pop-up message saying that Windows ...
    (microsoft.public.windowsxp.general)
  • Re: Windows Common LISP
    ... for new users under windows to start lisping if they don't like to pay ... I'm sure that sbcl folks will improve it if there are enough sbcl ... So thanks to Phil and folks from sbcl and clozure cl, ...
    (comp.lang.lisp)
  • Re: Activiation bug?
    ... "Phil" wrote in message ... I rebuilt my father-in-laws ... When we click on the activate windows ... > Father-in-law can type in the cirrect activation code.. ...
    (microsoft.public.windowsxp.security_admin)