View Single Post
Old 12-02-2008, 02:52 AM   #10 (permalink)
10011
Registered User
 
Join Date: Dec 2008
Posts: 7
OS: xp sp3


Re: IE popups (Virtumonde?) and disabled Windows Update

Quote:
Originally Posted by sUBs View Post
Post back to tell me what it says
Done.
Code:
SteelWerX Registry Console Tool 2.0
Written by Bobbi Flekman 2006 (C)

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
   LifeCam	REG_SZ         	"C:\Program Files\Microsoft LifeCam\LifeExp.exe"
   VX3000	REG_SZ         	C:\WINDOWS\vVX3000.exe
   AsusStartupHelp	REG_SZ         	C:\Program Files\ASUS\AASP\1.00.17\AsRunHelp.exe
   pccguide.exe	REG_SZ         	"C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe"
   googletalk	REG_SZ         	C:\Program Files\Google\Google Talk\googletalk.exe /autostart
   Adobe Reader Speed Launcher	REG_SZ         	"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
   AppleSyncNotifier	REG_SZ         	C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
   iTunesHelper	REG_SZ         	"C:\Program Files\iTunes\iTunesHelper.exe"
   NeroFilterCheck	REG_SZ         	C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
   QuickTime Task	REG_SZ         	"C:\Program Files\QuickTime\qttask.exe" -atboottime
   StartCCC	REG_SZ         	"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
   ATICustomerCare	REG_SZ         	"C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
   SunJavaUpdateSched	REG_SZ         	"C:\Program Files\Java\jre6\bin\jusched.exe"
   C6501Sound	REG_SZ         	RunDll32 c6501.cpl,CMICtrlWnd

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents
Malware/Virus scans report clean, so I'm pretty satisfied. A little googling has convinced me that a Java exploit allowed this malware to infect my system while browsing the web. I went ahead and uninstalled the old versions of JRE on my computer and got the latest version, which will hopefully prevent future issues.
10011 is offline