Jump to content
Posted 17 January 2010 - 09:35 AM
Posted 17 January 2010 - 09:54 PM
Edited by boopme, 17 January 2010 - 10:01 PM.
Posted 17 January 2010 - 10:12 PM
Posted 18 January 2010 - 03:34 AM
Hey. I've run Malwarebytes a bunch of times and it's not picking up those registry entries. Here's a log from the scan I just ran:
Can you post your most recent Malwarebytes log and then update it and run another scan and post that one as well? The registry entries are from a rootkit. I would like to see if it has been removed or if it keeps coming back.
Posted 18 January 2010 - 03:47 AM
Hello ,they do need to go and that requires Editing the Registry.
Modifying the registry can be dangerous (and can render your system unbootable) so it's advisable that you make a backup of the registry before proceeding.
Modification of the registry can be EXTREMELY dangerous if you do not know exactly what you are doing so follow the steps that are listed below EXACTLY. if you cannot perform some of these steps or if you have ANY questions please ask BEFORE proceeding.
Backing Up Your Registry
- Go Here and download ERUNT
(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
- Install ERUNT by following the prompts
(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
- Start ERUNT
(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
- Choose a location for the backup
(the default location is C:\WINDOWS\ERDNT which is acceptable).
- Make sure that at least the first two check boxes are ticked
- Press OK
- Press YES to create the folder.
For more information about modifying the registry, see this Microsoft article: http://support.microsoft.com/default.aspx/kb/256986
If you are not comfortable doing so. please post in the HJT forum for supervised assiistance.
Follow this guide. go and do steps 6 thru 8 ,, Preparation Guide For Use Before Using Hijackthis. Then go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title and post that complete log.
Let me know if it went OK.
Posted 18 January 2010 - 11:51 AM
0 members, 0 guests, 0 anonymous users