View Single Post
Old 11-13-2006, 06:03 AM   #2 (permalink)
Ried
Assistant Manager, TSF Academy; Moderator/Analyst Security Team
 
Ried's Avatar
 
Join Date: Jan 2005
Location: Ohio
Posts: 18,676
OS: WinXP and Win98se


Hello rballeny and welcome to TSF,

The infection you have, a variant of vundo, recognizes HijackThis and prevents HJT from reading the registry locations where it resides as well as hiding other infections in those locations.

I'd like you to rename HijackThis.exe to rballenny.exe.
  • Navigate to C:\Documents and Settings\abde\Desktop\hijackthis\HijackThis.exe
  • Right click on HijackThis.exe
  • Select 'Rename'
  • Type in rballenny.exe
  • Press Enter.

Please run a new scan with the rballenny.exe and post the log here so we can get started.
__________________

Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Keep this site free for all. Please consider, donating

"It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."
Ried is offline   Reply With Quote