View Single Post
Old 07-27-2006, 07:51 AM   #43 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,459
OS: N/A


Well, there's the little bugger.

Run Gmer again. When you see the entry, highlighted in red

Service C:\WINDOWS\system32\mssync20.sys (*** hidden *** ) [AUTO] mssync2020

Right click on it & have Gmer delete the service.
Reboot immediately.

Upon restarting Windows, locate the file - C:\WINDOWS\system32\mssync20.sys
Rename it to mssync20.sys.ren

Also look for any other file that has a similar name - mssync20****
If found, rename all of them

Then send me samples of the file to this webpage
__________________

Question - what have you done for the community today?
sUBs is offline