sounds like the nail.exe virus.
go to regedit, then search the directory
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon/Shell
Once you see the value for Shell on the right hand side, if it says "explorer.exe -nail.exe" , or something like that...then you've been hit. If so,I'll post up the fix I've used before.
|