View Single Post
Old 02-23-2006, 10:52 PM   #8 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,352
OS: N/A


Do another Blacklight scan.
For hidden entries found, choose for Blacklight to rename these files:

C:\WINDOWS\system32\mainsafe.exe
C:\WINDOWS\system32\mainsafe.empty.ini


The tool will ask if you want to reboot (restart) choose yes.
After you have rebooted post back with a fresh hijackthis log
__________________

Question - what have you done for the community today?
sUBs is offline