Jump to content
TrinaryOuroboros

Windows 2000 - Everything was Deleted.

Recommended Posts

Ran MBAM on a Windows 2000 Professional workstation (I know) and right before rebooting, we noticed a series of things were removed from the WINNT folder.

In fact, there was little in the way of any applications remaining.

:unsure:

Please have a look at the attached mbam log for details (I had to ZIP it, the log itself was over a MB) - we're trying to restore the workstation, but, we're worried that these are false positives.

PC has been infected for an unknown period of time, however, obviously things have been really bothering the end user as of late.

mbam_log_2008_09_09__15_14_24_.zip

mbam_log_2008_09_09__15_14_24_.zip

Share this post


Link to post
Share on other sites

Im firguring this out right now .

This may be windows 2000 specific , I should know soon .

Share this post


Link to post
Share on other sites

We will have a fix for this tonight . Three things need to come together for this problem happen , malware , 2K and OS corruption .

If any of the three problems do not exist then this cant happen .

Share this post


Link to post
Share on other sites

I've now had two client machines with that symptom. One was a XP Pro (Danish), the other a XP Home (Danish)

So the everything-in-windowssubdir-is-dangerous-so-lets-delete-it experience is not limited to W2K.

The hits was called somthing with Trojan.Fake etc.

Hope to be of some kind of help

Best regards

Lasse Westy Bech

Zindex Development

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.