lnk virus

Not my pc trying to help sis in law, so cant run scans etc. We think it is the lnk virus. All the icons on the desktop have changed to a shortcut link to lnk. I suggested system restore but everything is the lnk shortcut. I then suggested safe mode and I am informed that it auto boots back to the normal xp screen so she cant access safe mode. She has an anti virus but thats disappeared so cant run the scan. Any ideas.

Hi scudo,



My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

• I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
• The fixes are specific to your problem and should only be used for the issues on this machine.
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
• It's often worth reading through these instructions and printing them for ease of reference.
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
• Please reply to this thread. Do not start a new topic.

I have an idea as to what is going on. Let's see if we can get her straightened out.

First off… Let's see if my guess is correct.

Have her look in her My Documents folder and see if there is a file there called database.mdb. If there is:

Submit a file to VirusTotal for analysis

• Use the browse button on that page to navigate to the location of the file to be scanned.
• In the right hand panel,
• click on the file database.mdb in the My Documents folder
• then click the open button.
• The file will now be displayed in the submit box.
• Scroll down a bit and click "send file", wait for the results
• If you get a message saying File has already been analyzed: click Reanalyze file now
• Once scanned, copy and paste the link to the results page in your next reply.

While you're at VirusTotal paste the following in the browse box and scan it also:
%Temp%\virus\autorun.inf

Post results from both scans… or let me know if the files are not found.

OK thanks Tomk, I have emailed to her laptop and requested she follow your instructions and then email me back so I can post the results. Thanks for taking my (her) case. Scudo

If my thoughts are correct… this is going to get a bit tricky. She may be better served if you get her to register here and take over the topic on her own.

I emailed the details in post #2, I have not had a response from her. If I dont reply back wihin a couple of days assume she is not going to follow up and just close the case. My apologies. scudo

I understand. If you are able to contact her… please encourage her to register and take over the thread directly.

Hi Tomk, Going to register and should come live again tomorrow. Scudo

Ok Tomk, she has now registered.

Link to new topic…..
http://forums.whatthetech.com/index.php?showtopic=117783

Just to update you she has not been able to find the database.mdb file.

regards
Scudo

I've responded to her thread. I'll carry on with her there and close this one. Thanks for your help with this.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.