Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unknown Malware


  • Please log in to reply
1 reply to this topic

#1 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:11:51 PM

Posted 12 January 2006 - 11:45 PM

I am working on a friends computer that has an unknown malware.
Athlon 1700+ (1450mhz)
1 gb RAM DDR

When it boots it gets passed the BIOS screen then the keyboard is disabled, but not the mouse. When is completes the boot the desktop icons and task bar are missing.
If I boot to safe mode the keyboard will work but the desktop icons and taskbar are missing.
If I attempt to end a process in safe mode I get a message


unable to Terminate Process
The operation could not be competed
Acess denied

If I try to run sfc /scannow I receive a message..


Windows File Protection could not initiate a scanof protected systems files.
The specific error code is 0x000006ba
[The RPC server is unavailable.]


The letter case is accurate. It is extactly as reported. I could not screen capture, sorry.
Can anyone identify what is going on in this computer?

Edited by acklan, 13 January 2006 - 01:11 AM.

"2007 & 2008 Windows Shell/User Award"

BC AdBot (Login to Remove)

 


#2 acklan

acklan

    Bleepin' cat's meow

  • Topic Starter

  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:11:51 PM

Posted 13 January 2006 - 01:57 AM

I found to possible answers but I do not know how to write a HKey to try the fix. I found, or did not find, a HKey that MS says should be there. Here are the links..

http://www.microsoft.com/technet/prodtechn...n/sp2netwk.mspx

http://support.microsoft.com/default.aspx?...kb;en-us;838191

Can anyone lend a hand to decypher this for me?
"2007 & 2008 Windows Shell/User Award"




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users