Spybot Logo
Go Back   Safer-Networking Forums > Pacman's Portal > Startup programs
Register ProjectsBlogs FAQ Search Today's Posts Mark Forums Read Home Support Download Donate

Closed Thread
 
Thread Tools Display Modes
Old 2009-11-03, 11:35   #1
tummybudoy
Junior Member
 
Join Date: Nov 2009
Posts: 1
Default initdsk.exe, msfont.exe might have corrupted the task manager and regedit

are you familiar with these 2 executable files, initdsk.exe found in windows\system32 folder and msfont.exe found in windows folder?
is it a virus or malaware?

by the way, my OS is windows XP.

i think it might be a virus. i suspected that it corrupted the taskmgr.exe file so that when i press ctrl-alt-del, the windows task manager won't run.
it also put trojan in my system corrupting regedit.exe.

the initdsk.exe was not detected by avg and avast as a virus.
my anti malware detected a trojan (infecting the regedit.exe) and removed. but everytime i logon to windows the trojan appears again. i think the initdsk.exe file triggers the running of the trojan so that it would appear that i was not able to delete it, previously.
it also created the file msfont.exe. i don't know what it does but its size and date created is exactly the same as initdsk.exe. but in dos mode, its size is 0 byte.

it also triggered to pop up internet explorer. a lot of iexplore.exe files(processes) are running even if there's no opened browser.

since initdsk.exe is a startup program i couldn't delete it in windows.
i deleted it in DOS. then i logon to windows and scan, the trojan was gone already.

have you encountered this kind of problem and is initdsk.exe really the cause?
is initdsk.exe a virus?

appreciate your help, thanks.
tummybudoy is offline  
Old 2009-11-03, 17:50   #2
tashi
Member of Team Spybot
 
tashi's Avatar
 
Join Date: Oct 2005
Location: USA
Posts: 23,493
Rated LASSHes: 16
Default

Hello tummybudoy,
Quote:
Originally Posted by tummybudoy View Post
my anti malware detected a trojan (infecting the regedit.exe) and removed. but everytime i logon to windows the trojan appears again.
Might be best if someone takes a look at the system.

You can follow the instructions in this link to produce a HJT log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Then start your own thread in the Malware Removal Forum where an analyst will advise you when available.

Best regards.
__________________
UNITE-ASAP

Microsoft MVP. Consumer Security 2006-2010

Please help us improve Spybot, download our distributed testing client
tashi is offline  
Old 2009-11-08, 21:25   #3
initdsk
Junior Member
 
Join Date: Nov 2009
Posts: 2
Default initdsk.exe

I have same problem as tummybudoy.

I get Initdsk.exe has stopped working upon boot. This is Windows 7 Ultimate.

I also get multiple instances of iexplorer.exe pop up with ads. When try to start task manager nothing happens. It will not start task manager. I went to C:\Windows\System32\taskmgr.exe and double click and get Error "Windows cannot find 'C:\Windows\System32\taskmgr.exe'. Make sure you typed the name correctly, and then try again.'"

Any help greatly appreciated. Very frustrating.
initdsk is offline  
Old 2009-11-09, 06:56   #4
tashi
Member of Team Spybot
 
tashi's Avatar
 
Join Date: Oct 2005
Location: USA
Posts: 23,493
Rated LASSHes: 16
Default

initdsk's malware forum topic: http://forums.spybot.info/showthread.php?t=53229
__________________
UNITE-ASAP

Microsoft MVP. Consumer Security 2006-2010

Please help us improve Spybot, download our distributed testing client
tashi is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 14:01.


Copyright © 2000-2010 Safer-Networking Limited. All rights reserved.