Tech Support Forum - View Single Post - Think I've been HIjacked, please could you help?

Faith · 05-27-2005, 07:29 AM

I have been able to run house call which idenbtified the virus: BKDR_ROBOBOT.GEN

and I have reinstaled AVG and updates virus definitions. However, I still can't sus out where this trojan is hiding in the registry. There is an entry under the folowing that is a bit odd

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Winsock

a nd in the right panel is this: HelperdllName REG_EXPEND_SZ_%systemroot%\system 32\wshtcpip.dll

Could this be it?

Faith

05-27-2005, 07:29 AM	#12 (permalink)
Faith Registered User Join Date: Nov 2004 Location: England Posts: 147 OS: XP	update I have been able to run house call which idenbtified the virus: BKDR_ROBOBOT.GEN and I have reinstaled AVG and updates virus definitions. However, I still can't sus out where this trojan is hiding in the registry. There is an entry under the folowing that is a bit odd HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Winsock a nd in the right panel is this: HelperdllName REG_EXPEND_SZ_%systemroot%\system 32\wshtcpip.dll Could this be it? Faith