Tech Support Forum - View Single Post

Ried · 11-27-2006, 09:30 PM

Hello glaz3,

The infection you have, a variant of vundo, recognizes HijackThis and prevents HJT from reading the registry locations where it resides as well as hiding other infections in those locations.

I'd like you to rename HijackThis.exe to glaz.exe.

Navigate to C:\Documents and Settings\abde\Desktop\hijackthis\HijackThis.exe
Right click on HijackThis.exe
Select 'Rename'
Type in glaz.exe
Press Enter.

Run a new scan with glaz.exe and post the log here please.

11-27-2006, 09:30 PM	#2 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,970 OS: WinXP and Vista	Hello glaz3, The infection you have, a variant of vundo, recognizes HijackThis and prevents HJT from reading the registry locations where it resides as well as hiding other infections in those locations. I'd like you to rename HijackThis.exe to glaz.exe. Navigate to C:\Documents and Settings\abde\Desktop\hijackthis\HijackThis.exe Right click on HijackThis.exe Select 'Rename' Type in glaz.exe Press Enter. Run a new scan with glaz.exe and post the log here please. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."