View Single Post
Old 11-22-2006, 08:33 AM   #2 (permalink)
fredmh
Analyst, Security Team ; TSF Supporter
 
fredmh's Avatar
 
Join Date: May 2006
Location: Phila,Pa
Posts: 2,335
OS: XP


Hello filo romz, and welcome to TSF.


I am currently reviewing your log. Please note that this is under the supervision of an expert analyst,
and I will be back with a fix for your problem as soon as possible.

You may wish to Subscribe to this thread (Thread Tools) so that you are notified when you receive a reply.

Please be patient with me during this time.

=======================================




The infection you have, a variant of vundo, recognizes HijackThis and prevents HJT from reading the registry locations where it resides as well as
hiding other infections in those locations.


I'd like you to rename HijackThis.exe to filo.exe.
  • Navigate to C:\HijackThis\HijackThis.exe
  • Right click on HijackThis.exe
  • Select 'Rename'
  • Type in filo.exe
  • Press Enter.


Please run a scan with the newly renamed filo.exe and post the new log here.

Last edited by fredmh; 11-22-2006 at 08:35 AM.
fredmh is offline