WingDings Virus

Okay Guys, Here it is:

I went to a clients house and after updating their Comodo Antivirus (Puke), they rebooted after system and AV updates. The system rebooted with the Wingding Font that shut this person down for about a week…Yikes! After searching and searching on the internet, I found absolutely nothing except Here try this and try that. Since I Still have my Technet internal account I found a fix that works for Windows XP. This Fix worked for Windows Server 2008 Enterprise which my client was using.

After Dabbling with it and trying the fixes from the internet, I tried this and Vola! It worked and client is happy. So If you get this here is what I recommend doing:

1. Copy the following text to Notepad

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionFonts]
“Roman (All res)”=”ROMAN.FON”
“Script (All res)”=”SCRIPT.FON”
“Modern (All res)”=”MODERN.FON”
“Small Fonts (VGA res)”=”SMALLE.FON”
“Arial (TrueType)”=”ARIAL.TTF”
“Arial Bold (TrueType)”=”ARIALBD.TTF”
“Arial Bold Italic (TrueType)”=”ARIALBI.TTF”
“Arial Italic (TrueType)”=”ARIALI.TTF”
“Courier New (TrueType)”=”COUR.TTF”
“Courier New Bold (TrueType)”=”COURBD.TTF”
“Courier New Bold Italic (TrueType)”=”COURBI.TTF”
“Courier New Italic (TrueType)”=”COURI.TTF”
“Lucida Console (TrueType)”=”LUCON.TTF”
“Lucida Sans Unicode (TrueType)”=”L_10646.TTF”
“Times New Roman (TrueType)”=”TIMES.TTF”
“Times New Roman Bold (TrueType)”=”TIMESBD.TTF”
“Times New Roman Bold Italic (TrueType)”=”TIMESBI.TTF”
“Times New Roman Italic (TrueType)”=”TIMESI.TTF”
“WingDings (TrueType)”=”WINGDING.TTF”
“Symbol (TrueType)”=”SYMBOL.TTF”
“Symbol 8,10,12,14,18,24 (VGA res)”=”SYMBOLE.FON”
“Verdana (TrueType)”=”verdana.TTF”
“Verdana Bold (TrueType)”=”verdanab.TTF”
“Verdana Italic (TrueType)”=”verdanai.TTF”
“Verdana Bold Italic (TrueType)”=”verdanaz.TTF”
“Arial Black (TrueType)”=”ariblk.TTF”
“Comic Sans MS (TrueType)”=”comic.TTF”
“Comic Sans MS Bold (TrueType)”=”comicbd.TTF”
“Impact (TrueType)”=”impact.TTF”
“Georgia (TrueType)”=”georgia.TTF”
“Georgia Bold (TrueType)”=”georgiab.TTF”
“Georgia Bold Italic (TrueType)”=”georgiaz.TTF”
“Georgia Italic (TrueType)”=”georgiai.TTF”
“Franklin Gothic Medium (TrueType)”=”Framd.TTF”
“Franklin Gothic Medium Italic (TrueType)”=”Framdit.TTF”
“Palatino Linotype (TrueType)”=”pala.TTF”
“Palatino Linotype Bold (TrueType)”=”palab.TTF”
“Palatino Linotype Bold Italic (TrueType)”=”palabi.TTF”
“Palatino Linotype Italic (TrueType)”=”palai.TTF”
“Tahoma Bold (TrueType)”=”tahomabd.TTF”
“Trebuchet MS (TrueType)”=”trebuc.TTF”
“Trebuchet MS Bold (TrueType)”=”trebucbd.TTF”
“Trebuchet MS Bold Italic (TrueType)”=”trebucbi.TTF”
“Trebuchet MS Italic (TrueType)”=”trebucit.TTF”
“Webdings (TrueType)”=”webdings.TTF”
“Estrangelo Edessa (TrueType)”=”estre.TTF”
“Gautami (TrueType)”=”gautami.TTF”
“Latha (TrueType)”=”latha.TTF”
“Mangal (TrueType)”=”mangal.TTF”
“Mv Boli (TrueType)”=”mvboli.TTF”
“Raavi (TrueType)”=”raavi.TTF”
“Shruti (TrueType)”=”shruti.TTF”
“Tunga (TrueType)”=”tunga.TTF”
“Sylfaen (TrueType)”=”sylfaen.TTF”
“WST_Czec (All res)”=”wst_czec.FON”
“WST_Engl (All res)”=”wst_engl.FON”
“WST_Fren (All res)”=”wst_fren.FON”
“WST_Germ (All res)”=”wst_germ.FON”
“WST_Ital (All res)”=”wst_ital.FON”
“WST_Span (All res)”=”wst_span.FON”
“WST_Swed (All res)”=”wst_swed.FON”
“Courier 10,12,15 (VGA res)”=”COURE.FON”
“MS Sans Serif 8,10,12,14,18,24 (VGA res)”=”SSERIFE.FON”
“MS Serif 8,10,12,14,18,24 (VGA res)”=”SERIFE.FON”
“Tahoma (TrueType)”=”TAHOMA.TTF”
“Microsoft Sans Serif (TrueType)”=”MICROSS.TTF”
“Arial Narrow (TrueType)”=”ARIALN.TTF”
“Book Antiqua (TrueType)”=”BKANT.TTF”
“Bookman Old Style (TrueType)”=”BOOKOS.TTF”
“Century Gothic (TrueType)”=”GOTHIC.TTF”
“Garamond (TrueType)”=”GARA.TTF”
“Haettenschweiler (TrueType)”=”HATTEN.TTF”
“MS Outlook (TrueType)”=”OUTLOOK.TTF”
“Monotype Corsiva (TrueType)”=”MTCORSVA.TTF”
“Wingdings 2 (TrueType)”=”WINGDNG2.TTF”
“Wingdings 3 (TrueType)”=”WINGDNG3.TTF”
“Book Antiqua Bold (TrueType)”=”ANTQUAB.TTF”
“Book Antiqua Bold Italic (TrueType)”=”ANTQUABI.TTF”
“Book Antiqua Italic (TrueType)”=”ANTQUAI.TTF”
“Arial Narrow Bold (TrueType)”=”ARIALNB.TTF”
“Arial Narrow Bold Italic (TrueType)”=”ARIALNBI.TTF”
“Arial Narrow Italic (TrueType)”=”ARIALNI.TTF”
“Bookman Old Style Bold (TrueType)”=”BOOKOSB.TTF”
“Bookman Old Style Bold Italic (TrueType)”=”BOOKOSBI.TTF”
“Bookman Old Style Italic (TrueType)”=”BOOKOSI.TTF”
“Bookshelf Symbol 7 (TrueType)”=”BSSYM7.TTF”
“Garamond Bold (TrueType)”=”GARABD.TTF”
“Garamond Italic (TrueType)”=”GARAIT.TTF”
“Century Gothic Bold (TrueType)”=”GOTHICB.TTF”
“Century Gothic Bold Italic (TrueType)”=”GOTHICBI.TTF”
“Century Gothic Italic (TrueType)”=”GOTHICI.TTF”
“MS Reference Sans Serif (TrueType)”=”REFSAN.TTF”
“MS Reference Specialty (TrueType)”=”REFSPCL.TTF”

2. Click file then Save as on Notepad
(Save this as Something like fonts.reg or something like that)

3. Just keep clicking okay where the okay button should be.

4. Restart your computer.

Thats it that is all there is to it. I spent about 3 hrs trying to figure this one out. Not too complicated since I knew it had to do with Fonts. What this .reg file does is it enters in the registry automatically the key that was either corrupt, damaged or missing when the update happened. Now May I remind all of you that this happened For Commodo, this may happen with other antivrus programs.

Hope this helps you out.

Till Next time

Dan
Geekazoid Tech