/

A LINGERING INFECTION Question-:My system was infected with I-Worm/RC5.A.Ihad AVG anti virus software loaded on my sysetm ,which was able to cure the system of the virus.But now whgenever I start the system and enter Windows,the system tries to run Wininit.exe.Why is this happening?Can you tell me what havoc this worm creates in the system and how to set it right?
Answer-:The virus is know as to infect Win9x machine where file sharing is enabled .It propagate by randomly selecting an arbitrary IP addressand attempting to connect to the roof file share(typically C:)on that machine.
If it it successful in accessing that share ,it will copy several files into the remote machines C:\Windows\Ssystem\directories.These files typically would be Wininit.exe,Dnetc.exe and Dnetc.ini.
your anti virus program may have got rid of virus,the following line from the Win.ini has not been removed:
load=C:\\Windows\System\Wininit.exe.
To remove this line from the Win.ini file:-
Go to Start->Run and type sysedit.
Click on the win.ini file from the different wi-dows that open,and in that file go down to the [Windows] section .Thereafter remove the offernding line .
Home