View Single Post
Old 08-28-2005, 09:33 PM   #26 (permalink)
tetonbob
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,578
OS: 2000 Pro; XP Pro; XP Home


stretched -

Have you tried the manual registry search as suggested by MicroBell? Did you try to run the tools in safe mode?

Quote:
*Note* If you have more then one user account I need you to run the Regsearch under each and post them. IF Regsearch doesn't run...you will need to enter the registry editor manually and do a search. Post EVERY key you find that listed under. You can also run these in safe mode if need be.
Can you open regedit at all? In safe mode? I know you can't use the Run box in normal mode, yes? Open it through Scheduled Tasks like the others you've done, then go to Edit>Find and type in specific911 click Find Next.

We need some way to access the location of these registry locations to help you remove this beast.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline