Virus? Key Logger? Wingdings as system font? WTH?
Posted: Tue Oct 26, 2004 3:32 pm
Dad rings me last night says he can't start the PC. I go over there and boot the thing. The standard XP Pro loading screen begins (The one with the moving blue bar - so far so good)...
And then a login screen comes up - BUT it's not the normal login screen - there are two icons shown, neither of which are my Dad's logins - and the system fonts are all webdings or wingdings (no idea which)!
Clicking either login icon simply flashes the screen and displays the login screen again. Clicking the "shutdown" button brings up the usual 3-option window, (in english) but this window is squashed horizontally!
Additionally, the login screen is the wrong resolution.
OK, so I'm flummoxed by this - so I take the HDD out and take it home, plug it into a spare IDE channel, update NAv 2002 and do a full scan of that drive. 129,000 files - NO VIRUSES reported.
This seems curiouser and curiouser! There's something awfully dodgy about the windows boot - it "feels" wrong to me - almost like it's a fake windows logon. The res is wrong, and the squashed shutdown dialog is weird. Plus - it's in english - where all the text on the login screen is wingings/webdings.
I tried booting to Safe Mode - and the results are the same - so I'm not sure how to proceed.
Is there someway I can invoke the system restore?
Will I have to install XP Pro over the top? I'd prefer not to wipe out all the old man's installed programs if possible.
And yes, when I get it going again - I will switch the old man over to Firefox!
This began when he went and did a manual update of Norton AV 2002 and LU etc. After updating, Norton reported he had a virus in his inbox, and the system required restarting. That was the last time he saw a desktop.
Any ideas on how to proceed?
And then a login screen comes up - BUT it's not the normal login screen - there are two icons shown, neither of which are my Dad's logins - and the system fonts are all webdings or wingdings (no idea which)!
Clicking either login icon simply flashes the screen and displays the login screen again. Clicking the "shutdown" button brings up the usual 3-option window, (in english) but this window is squashed horizontally!
Additionally, the login screen is the wrong resolution.
OK, so I'm flummoxed by this - so I take the HDD out and take it home, plug it into a spare IDE channel, update NAv 2002 and do a full scan of that drive. 129,000 files - NO VIRUSES reported.
This seems curiouser and curiouser! There's something awfully dodgy about the windows boot - it "feels" wrong to me - almost like it's a fake windows logon. The res is wrong, and the squashed shutdown dialog is weird. Plus - it's in english - where all the text on the login screen is wingings/webdings.
I tried booting to Safe Mode - and the results are the same - so I'm not sure how to proceed.
Is there someway I can invoke the system restore?
Will I have to install XP Pro over the top? I'd prefer not to wipe out all the old man's installed programs if possible.
And yes, when I get it going again - I will switch the old man over to Firefox!
This began when he went and did a manual update of Norton AV 2002 and LU etc. After updating, Norton reported he had a virus in his inbox, and the system required restarting. That was the last time he saw a desktop.
Any ideas on how to proceed?