View Single Post
Old 04-15-2006, 06:01 PM   #10 (permalink)
Vikesrock8411
Analyst, Security Team
 
Vikesrock8411's Avatar
 
Join Date: Jun 2005
Posts: 3,065
OS: Windows XP


Doesn't look like there should be anything protecting that key so we'll try a slightly different version of the fix.

Please copy everything from the box below into Notepad (please remove the space between the "o" and "l" of the word "Control"). Click File>Save As. Change "Save as Type" to "All files" and save it to your desktop as Bootexecute.reg

Quote:
REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"BootExecute"=hex(7):61,75,74,6f,63,68,65,63,6b,20,61,75,74,6f,63,68,6b,20,2a,\
00,00
Double click on BootExecute.reg and click yes when prompted to merge it into your registry.

Then run a new silent runners scan and post the log here.

Last edited by Vikesrock8411; 04-15-2006 at 06:03 PM.
Vikesrock8411 is offline