I Posted this to the wrong forum. Please disregard. I was on the wrong page when I started this new topic. I have posted this to the correct forum.
Again sorry for the mixup.
I need help removing a virus from my windows Server 2003. I have alredy resolved the issues of the Virus changing the path in the registry for the userinit.exe file and I am able to log into my server. This was done through a remote registry session to the server and I modified the key located at HKLM\software\microsoft\windows nt\currentversion\winlogon\ The Key is Userinit and the path should read C:\Windows\System32\Userinit.exe, Mine was pointing to the c:\documents and settings folder.
I am currently going through HiJackThis and need some assistance with the log.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:55:53 AM, on 2/24/2011
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v7.00 (7.00.6000.17093)
Boot mode: Normal
EDITed away HJT log
Edited by boopme, 24 February 2011 - 01:08 PM.