Help - Search - Members - Calendar
Full Version: Windows Defender And A Nasty Trojan
BleepingComputer.com > Security > Windows Defender
   
endedge
Ok. It picked up the trojan that was doing weird things to my computer. But it wouldn't delete or do anything- on the grounds that it's read-only. So on my history, they are programs that are simply being 'allowed' when defender still claims them to be potentially dangerous.

This program is horrible. It seems to attack other antivirus programs so I can't get rid of it! I'm not allowed to update the Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB886903). Windows files are turning up corrupt and the computer keeps crashing. And the controls for my address bar on exlorer are faded out. The CPU is running at 100% - constantly! I have the registry entries here:

HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\PostNotCached
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\NavigationFailure
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\NoAdd-ons
and a few others like that.

Is it okay to delete these entries manually? I'm not a computer expert, but I know they look important. The problem is, if they're infected, what way can they be disposed of? No problem I know can detect them or dispose of them, even when I am able to delete them.
Jacee
Hi endedge, looks like you have a CoolWebSearch (About:Blank) hijack. Follow the instructions in this link to get the help you need in our HijackThis forum:
http://www.bleepingcomputer.com/forums/topic34773.html
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.