Weird autostart in win98

[Nini-Veh]

We have some weird problems w my Dad's computer that perhaps you might be able so solve for us. When win98 (SE) is loaded, the program folder opens. The autostart folder's empty.

He can live with this as it's really a minor problem, but taken together with other problems such as a suddenly missing IE6.exe file , an unsolicited move of c. half the program files to a new file named NULL and the fact that the Swedish version of IE6 can no longer be installed (gave him the English version instead, which worked fine) makes us think that a virus is at work. Nothing shows up with scans with F-secure and Norton 2002.

Any ideas? :t

/Nini-Veh

[AllGamer]

Does he has the newest virus definition?
http://securityresponse.symantec.com/avcenter/download/us-files/20020925-002-i32.exe

also you can run MSCONFIG.EXE

and remove EVERYTHING from the STARTUP

then save and reboot

now it should work ok

you can select the REPAIR option of the IE inside Add/Remove Program

to get the swedish version back

:t

make sure to run WindowsUpdate

and download everything :D

[Baddog]

NAME

null - null file


DESCRIPTION

Data written on a null special file is discarded.

Reads from a null special file always return 0 bytes.



EXAMPLES

To create a zero-length file, use either of the following:

cat /dev/null >file
cp /dev/null file



FILES

/dev/null


STANDARDS CONFORMANCE

null: AES, SVID2, XPG2, XPG3, XPG4, FIPS 151-2, POSIX.1, POSIX.2

[AllGamer]

huh? :confused:

[Baddog]

Originally posted by Nini-Veh
We have some weird problems

an unsolicited move of c. half the program files to a new file named NULL

Any ideas? :t

/Nini-Veh


a program is moving the files to a null file, and then they are deleted after they are read once..

[Nini-Veh]

He did have the latest antivirus updates, but it never hurts to run the intelligent updater - I forgot about that! :eek:

I'll try the MSCONFIG bit and make sure he's run winupdate.

Your suggestion that the files are removed from the NULL folder after being run once sounds weird. I renamed the folder and the programs that were in the folder could be run several times, including after reboot. What sort of program could move files in this way?

Thanks guys! :t