first off ive ran a bunch of different scans and none of them do any good what so ever.
Ive ran kaspersky , trend , spyware doctor , avast , malwarebytes , superantispyware , a-squared ....
ran some in safe mode , also disabled system restore. all show my computer is clean... But I knew they were all wrong.
since objects on my browser keep moving around and a funny google tool bar has been added . I have pictures of all of this
I found some files in my registry that are made by W32/Mimail.i@MM . see i ended up googleing my trouble and i ended up at a mcafee vrus glossary page. heres the thing nothing is finding a W32/Mimail.i@MM on my computer. but I have W32/Mimail.i@MM registry files . heres an image of the files i had and deleted this is from the mcafee virus glossary
bleeping computer will not allow me to paste any pictures on here . so here is the link to the first
at photobucket with details
and now heres a picture of my tool bar with some details
would like to know how to get my toolbar and internet page back to normal again.
my computer is not up to date by the way. because ive restored the thing 4 or 5 times
I also have a file in my registry it is named bootconf.exe
kinda scared to touch it cause it has the word boot in it. maybe somthun do with computer booting ? I dunno
but from googleing that file the bits ive read says bootconf.exe has to do with homepage hijacking.
but dont wanna touch it till someone more experienced can give me some info
also found another file in the same part of the registry just moments ago fngn.dll
acording to a google search trendmicro says the file is made by TROJ_PSWSYS.E
still dont udnerstand why none of these spyware gadgets or antivrius softwares cant locate this stuff and get rid of it
BY THE WAY ALL OF THIS STUFF SEEMS TO KINDA STAND OUT BECAUSE THE NORMAL STUFF IN THIS PART OF REGISTRY DOESNT HAVE ANY .EXE OR . THIS OR THAT
because the normal stuff is like PAINT , WEATHER, MALWAREBYTES , SONIC , DEEEPBURNER
no .exe or .dll type stuff which makes me thing bootconf.exe is a fake
Edited by gonefishin, 31 July 2008 - 05:44 PM.