question

• StarPuppy

  17 Feb 07, 22:51

  its not really a important question..just curious
  
  my school computers has been infected with a trojan(Win32/DlUrsnif) which creates 2 files
  
  -> temp1.exe
  -> temp2.exe
  
  now..the intresting thing(maybe to me) is when i enter safe mode, the computer auto restarts upon reaching desktop whereas the computer does not auto-restart( maybe after 1/2 hour)
  
  i thought safe mode only opens the basic minimum applications.. shouldn't the computer auto restart upon reaching desktop in normal mode and not vice versa?
• Darkness_hacker99

  17 Feb 07, 22:54

  Your school com or your com..
• StarPuppy

  17 Feb 07, 22:56

  Originally posted by Darkness_hacker99:

  Your school com or your com..

  my school com la
  
  
  
  i will never allow my own computer to be loaded with whatevernot...stupid school com got lots of virus/trojan..i always have to bring back home to let home computer to do scanning
  
  one of this days..i gonna tio something from the stupid school pc
  
  
• Darkness_hacker99

  17 Feb 07, 22:59

  Originally posted by StarPuppy:

  my school com la
  
  
  
  i will never allow my own computer to be loaded with whatevernot...stupid school com got lots of virus/trojan..i always have to bring back home to let home computer to do scanning
  
  one of this days..i gonna tio something from the stupid school pc
  
  

  
• MyPillowTalks

  18 Feb 07, 08:44

  standby the cmd lor
  
  when wanna restart, type shutdown -a
  
  haha
  
  but then again, sch com ish sch com......dunno how come there antivirus and spyware buy until sho expensive cannot be as good as our avg free and lavasoft
  
  
• ndmmxiaomayi

  18 Feb 07, 11:38

  You are right.
  
  But do you know that programs can be written the other way round so that you can't bypass it?
  
  Just delete the temp1 and temp2 in normal mode.
  
  And don't forget, for Windows, it's the registry that controls Windows, not files that control Windows. Windows registry is powerful, and literally anything you can do with a GUI can be done via registry.
• StarPuppy

  18 Feb 07, 12:49

  Originally posted by ndmmxiaomayi:

  You are right.
  
  But do you know that programs can be written the other way round so that you can't bypass it?
  
  Just delete the temp1 and temp2 in normal mode.
  
  And don't forget, for Windows, it's the registry that controls Windows, not files that control Windows. Windows registry is powerful, and literally anything you can do with a GUI can be done via registry.

  *raises hand*
  
  i removed them from the task manager however upon removing, they will appear back again..so i can't delete them as they are being used by the system
  
  and using KillBox shuts down the whole PC
  
  
• ndmmxiaomayi

  18 Feb 07, 15:31

  Originally posted by StarPuppy:

  *raises hand*
  
  i removed them from the task manager however upon removing, they will appear back again..so i can't delete them as they are being used by the system
  
  and using KillBox shuts down the whole PC
  
  

  When Killbox opens?
  
  If you use the Delete on boot option, it will shut down the PC. If when Killbox opens the PC shuts down, then the virus is targeting programs that removes it.
• manyu882

  18 Feb 07, 16:50

  Originally posted by StarPuppy:

  *raises hand*
  
  i removed them from the task manager however upon removing, they will appear back again..so i can't delete them as they are being used by the system
  
  and using KillBox shuts down the whole PC
  
  

  and also maybe because killbox needs to close a root of a windows file. however, the root file is a file needed to keep windows running. and therefore, it shuts down