Virus? Key Logger? Wingdings as system font? WTH?

For system help, all hardware / software topics NOTE: use Coders Corner for all coders topics.

Moderators: Krom, Grendel

Post Reply
User avatar
Mobius
DBB_Master
DBB_Master
Posts: 7940
Joined: Sun Jun 03, 2001 2:01 am
Location: Christchurch, New Zealand
Contact:

Virus? Key Logger? Wingdings as system font? WTH?

Post by Mobius »

Dad rings me last night says he can't start the PC. I go over there and boot the thing. The standard XP Pro loading screen begins (The one with the moving blue bar - so far so good)...

And then a login screen comes up - BUT it's not the normal login screen - there are two icons shown, neither of which are my Dad's logins - and the system fonts are all webdings or wingdings (no idea which)!

Clicking either login icon simply flashes the screen and displays the login screen again. Clicking the "shutdown" button brings up the usual 3-option window, (in english) but this window is squashed horizontally!

Additionally, the login screen is the wrong resolution.

OK, so I'm flummoxed by this - so I take the HDD out and take it home, plug it into a spare IDE channel, update NAv 2002 and do a full scan of that drive. 129,000 files - NO VIRUSES reported.

This seems curiouser and curiouser! There's something awfully dodgy about the windows boot - it "feels" wrong to me - almost like it's a fake windows logon. The res is wrong, and the squashed shutdown dialog is weird. Plus - it's in english - where all the text on the login screen is wingings/webdings.

I tried booting to Safe Mode - and the results are the same - so I'm not sure how to proceed.

Is there someway I can invoke the system restore?

Will I have to install XP Pro over the top? I'd prefer not to wipe out all the old man's installed programs if possible.

And yes, when I get it going again - I will switch the old man over to Firefox!

This began when he went and did a manual update of Norton AV 2002 and LU etc. After updating, Norton reported he had a virus in his inbox, and the system required restarting. That was the last time he saw a desktop.

Any ideas on how to proceed?
User avatar
CDN_Merlin
DBB_Master
DBB_Master
Posts: 9780
Joined: Thu Nov 05, 1998 12:01 pm
Location: Capital Of Canada

Post by CDN_Merlin »

You can use the XP CD and rerun the setup and do a REPAIR. I also think you can do a restore from command line but you'd have to check MS's web site for the info.

If he has a keylogger etc you may be better off reformating.
User avatar
JMEaT
DBB Meat ByProduct
DBB Meat ByProduct
Posts: 10047
Joined: Wed Mar 10, 1999 3:01 am
Location: USA

Re: Virus? Key Logger? Wingdings as system font? WTH?

Post by JMEaT »

Mobius wrote:This seems curiouser and curiouser!
I'm sorry Mobi, I'm not usually a grammar nazi, but dang dude. Is that really a word Down Under?

:P
rijruna
DBB Ace
DBB Ace
Posts: 84
Joined: Thu Jan 30, 2003 3:01 am
Location: melbourne australia

Virus? Key Logger? Wingdings as system font? WTH?

Post by rijruna »

sorry, but i couldnt help myself Jmeat. seems you have never read 'alice in wonderland'[not written downunder so it must be one of them northern hemisphere types who did].
mobi, go with the repair off the cd, worked for me
cheers
rij
User avatar
Defender
DBB Master
DBB Master
Posts: 5135
Joined: Mon Aug 23, 1999 2:01 am
Location: Boston, MA. USA

Re: Virus? Key Logger? Wingdings as system font? WTH?

Post by Defender »

rijruna wrote:sorry, but i couldnt help myself Jmeat. seems you have never read 'alice in wonderland'[not written downunder so it must be one of them northern hemisphere types who did].
mobi, go with the repair off the cd, worked for me
cheers
rij
Actually the correct grammar for that would be "This seems more and more curious!". :P
User avatar
JMEaT
DBB Meat ByProduct
DBB Meat ByProduct
Posts: 10047
Joined: Wed Mar 10, 1999 3:01 am
Location: USA

Post by JMEaT »

Yay! I successfully derailed a topic!

Carry on. :P
User avatar
Mobius
DBB_Master
DBB_Master
Posts: 7940
Joined: Sun Jun 03, 2001 2:01 am
Location: Christchurch, New Zealand
Contact:

Post by Mobius »

Alice in Wonderland. Yes.

OFF WITH JMEAT'S HEAD!!
MD-2389
Defender of the Night
Defender of the Night
Posts: 13477
Joined: Thu Nov 05, 1998 12:01 pm
Location: Olathe, KS
Contact:

Post by MD-2389 »

I don't suppose you tried repairing the font folder...
User avatar
Canuck
DBB Admiral
DBB Admiral
Posts: 1345
Joined: Tue Jun 12, 2001 2:01 am

Post by Canuck »

User avatar
Canuck
DBB Admiral
DBB Admiral
Posts: 1345
Joined: Tue Jun 12, 2001 2:01 am

Post by Canuck »

See Tyranny's post about System Restore.

phpbb/viewtopic.php?t=4357
User avatar
DCrazy
DBB Alumni
DBB Alumni
Posts: 8826
Joined: Wed Mar 15, 2000 3:01 am
Location: Seattle

Post by DCrazy »

You linked to this very thread twice. Why? :P
User avatar
Mobius
DBB_Master
DBB_Master
Posts: 7940
Joined: Sun Jun 03, 2001 2:01 am
Location: Christchurch, New Zealand
Contact:

Post by Mobius »

HEH!!!

Recursive links! I like it.

Doesn't fix the problem though.

However, the old man doesn't mind reinstalling everything - so it hardly matters now!
User avatar
woodchip
DBB Benefactor
DBB Benefactor
Posts: 17865
Joined: Tue Jul 06, 1999 2:01 am

Post by woodchip »

Did your pa have a firewall?
User avatar
JMEaT
DBB Meat ByProduct
DBB Meat ByProduct
Posts: 10047
Joined: Wed Mar 10, 1999 3:01 am
Location: USA

Post by JMEaT »

Mobius wrote:OFF WITH JMEAT'S HEAD!!
NevAr! :D
User avatar
Canuck
DBB Admiral
DBB Admiral
Posts: 1345
Joined: Tue Jun 12, 2001 2:01 am

Post by Canuck »

No idear why I ended up wit two posts...

Note my bad speeling, someone post a correction post.
User avatar
Tyranny
DBB Defender
DBB Defender
Posts: 3399
Joined: Sun Nov 10, 2002 3:01 am
Location: Phoenix, Arizona

Post by Tyranny »

I think you meant...

phpbb/viewtopic.php?t=4159

Not sure if that would fix this problem though. If he can't get into Windows to begin with theres no way to follow the steps I posted. Sounds like it has a much deeper solution. Running the repair from the XP cd sounds like a start but...*shrug*

Sounds like you'll have to reformat in the long run though just to be sure.
Arbitar
DBB Ace
DBB Ace
Posts: 186
Joined: Sun Apr 04, 2004 1:49 am

Re: Virus? Key Logger? Wingdings as system font? WTH?

Post by Arbitar »

Mobius wrote:This seems curiouser and curiouser!
Uhh Mobius?
Image
User avatar
Iceman
DBB Habitual Type Killer
DBB Habitual Type Killer
Posts: 4929
Joined: Thu Apr 20, 2000 2:01 am
Location: Huntsville, AL. USA
Contact:

Re: Virus? Key Logger? Wingdings as system font? WTH?

Post by Iceman »

Defender wrote: Actually the correct grammar for that would be "This seems more and more curious!". :P
Where I come from that would be "This done be curioser and curiouser"
User avatar
WarAdvocat
DBB Defender
DBB Defender
Posts: 3035
Joined: Sun Jun 23, 2002 2:01 am
Location: Fort Lauderdale, FL USA

Post by WarAdvocat »

It's a literary allusion....let it go :p
MD-2389
Defender of the Night
Defender of the Night
Posts: 13477
Joined: Thu Nov 05, 1998 12:01 pm
Location: Olathe, KS
Contact:

Post by MD-2389 »

MD-2389 wrote:I don't suppose you tried repairing the font folder...
Mobi?
Post Reply