1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Xp starting with pop up message

Discussion in 'Windows XP' started by shemeerali, Oct 2, 2008.

Thread Status:
Not open for further replies.
Advertisement
  1. shemeerali

    shemeerali Thread Starter

    Joined:
    May 19, 2007
    Messages:
    9
    Dear freinds !!!! MY managers pc is showing the error msg that "You raped me *******" whenevr it starts. There were some virus in the pc.But now all the virus have been removed using macfee but the pop up is coming now. i Searched my registry for this entyr but nohng found. Lots of other pop up were there but all removed by checking in regedit. but this one really eating my time:eek: Please help

    Thanx in advance
     
  2. draceplace

    draceplace

    Joined:
    Jun 8, 2001
    Messages:
    2,583
    look in mfsconfig and check out the items in startup. If not there scan the PC hard drive (although it could be on the network is starts locally) looking for *.vbs files (hidden and system). This prank is often done with vbscript and thats where I would start. One of those HJT logs may list this also. The name may be vague so you may have to "Edit" not Open the *.vbs file and see whats in it.

    Also if this only happens when manager logs in, only on reboot, or anyone logging in will be a clue on the setup of this 'prank'. Before you delete or rename the offending file check advance properties and see who the file owner is?
     
  3. Sief9

    Sief9

    Joined:
    Oct 2, 2008
    Messages:
    44
    Like draceplace said, that's most likely a prank, no virus (that I've seen) is that specific. :p

    Umm, to add on with what drace said, you could check the "Startup" folder on the computer, maybe the *.vbs file is in there.
     
  4. oshwyn5

    oshwyn5

    Joined:
    May 23, 2007
    Messages:
    730
    I would have a malware expert check into this.
    have them review a combofix log for files created on or about the time of this as well as abnormal entries.

    Is this a text message or could it be a picture? I have seen this where a virus put in a preboot image and screensaver file which load even after the virus is removed.


    Also , X-Setup (free version will do) may help you find these entries
    (version 6.3 )
    http://www.majorgeeks.com/article.php?sid=127

    It will be something like this
    Launch and agree to terms
    Choose default classic interface
    Go to startup / shutdown => startup=> Win2k/xp
    Section 30 before login
    Check legal notice
    Check pre login screen saver
    check pre login wall paper
     
  5. shemeerali

    shemeerali Thread Starter

    Joined:
    May 19, 2007
    Messages:
    9
    But my frnd i uncheckd all the items on the startup using msconfig. But still that comes. And i tried 2 in administrator also !! the same popup comes dear

    thanks for spenting ur valuable time for me. Pls revert me back
     
  6. draceplace

    draceplace

    Joined:
    Jun 8, 2001
    Messages:
    2,583
    Any results from the *.vbs file search or did you try X-Setup?

    I now concur with oshwyn5 that you need to have a malware expert check it out. More problems can be caused by acting without knowing the problem.

    Have your Boss log onto a different computer and see if it goes away. Do you have roaming profiles? If it goes away get your boss a different computer with his files and programs. Then fix this one.
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - starting message
  1. flavallee
    Replies:
    0
    Views:
    857
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/755384

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice