!URGENT! - and yes, this is for real.

[Phobic]

Ok, this isn't directly VB related, but I know you guys can help me out. Ok, somehow, some a-hole managed to get an AOL pw stealer (it waits for the AOL password screen, fetches my pw and sends it to someone else for them to use.)

NOW, I can succesfully search and destroy this prog, it was made in VB5, and it starts up when the comp starts. It creates a file called msdos98.exe on my C drive everytime I start the computer. I found the registry location where it runs from. STILL, there is another program that creates the msdos98.exe, and runs it during startup. What should I do? I don't want to have to find and kill this prog everytime I run the computer, and I don't want to reformat it either. What possible places are there for a startup file to be?

Thanks a lot.

[PhilipG]

Assuming it isn't a "driver" (Can't really write drivers in VB), then its gotta be in a run statement in the registry, Win.ini, or your start-up folder.


------------------
HTH,
Philip
[email protected]

[Phobic]

I've checked the only registry log in I know of (windows\run\...) nothing in there. Startup... no... win.ini... no... WHAT THE HECK CAN I DO!?

[DiGiTaIErRoR]

in your Win.ini there's a line that says:
Run=
If the programs there then you got a problem else it could be running as a service. So it's not in control/alt/del. Main thing here is don't be dumb, don't download stuff!!!

------------------
DiGiTaIErRoR
VB, QBasic, Iptscrae, HTML
Quote: There are no stupid questions, just stupid people.

[Bob Baddeley]

can't you search the registry for anything called msdos98.exe?

also, and this is probably stupid to say, you might, if under extreme duress, possibly call AOL and see what they have to say, but that's probably a bad idea that you never want to do. Could make things worse, in all truth.

and how did you find out that this thing exists in the first place?

[This message has been edited by Bob Baddeley (edited 02-02-2000).]

[Phobic]

First of all, I wasn't dumb, I happened to have mirc open with the auto-accept download on because I was waiting for a file from a friend, and I left the computer.

I searched for msdos98.exe. No use.

Already checked win.ini. And thanks to you, I just realized that all this prog did was add a bunch of spaces so the run line looked blank. All I had to do was scroll over. I think I've killed it. Thanks.