|  | | Re: Re: Servinfo nestahuje 28. 12. 2004 / 12:13 | |
| | Pred nejakou dobou jsem resil stejny problem, nakonec jsem napsal mail vyrobci ServInfa Michaelu Frantzeskakisovi a ten mi na to odpovedel:
This is a problem that has been reported to me by some other users and is
caused by a virus infection (a trojan type).
Search for a system file named "protocol" (NOT protocol.ini, just protocol
with NO EXTENSION - if you have set windows explorer to hide known
extensions you might confuse these two files). It is located at the
"C:\Windows\system32\drivers\etc" directory for WinXP.
If you find that this file is missing from this directory then you are
probably not infected but that's causing the problem to ServInfo - I will
send you this file.
If the file is there then check that the above location has not been altered
in the windows registry (that's one of the things this virous would do).
To do this open the registry editor:
Start -> Run -> REGEDIT
navigate (or seach) to this key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
(could also instead of "CurrentControlSet" be two keys with ControlSet001
and ControlSet002, or something similar) and see if the value is :
"DataBasePath"="%SystemRoot%\System32\drivers\etc"
If it is instead anything else (e.g "DataBasePath"="%SystemRoot%\help") then
you have been infected from this virus. Restoring this entry to the correct
value will make ServInfo work again. However, you should use your antivirus
software to check for the infection.
A long time ago I have found these links for a virus that does this thing:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100719
but there might be other viruses that could do the same.
Opravdu jsem nasel pozmeneny register a po jeho upraveni mi ServInfo bezi uz pekne.... |
| |
|
