View Single Post
Old 12-05-2006, 08:55 PM   #6 (permalink)
tetonbob
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,156
OS: 2000 Pro; XP Pro; XP Home


I'm curious as to where exactly in the registry you removed these from:

Quote:
In Reg I deleted tcs.exe, tcs.ini & holes.lst
These are files associated with a trojan, and should not necessarily be referenced in the registry other than searches you may have performed.

Have you run a system search for these files to see if they are on the system? Start>Search>All Files and Folders

tcs.exe can also be part of trend's Damage CleanUp Engine, but if those other files were present, I'd have my doubts.

Let's have a deeper look at your startups.

Download StartupList and extract the contents.

Run StartupList.exe, this may take a few minutes. When it's ready, go to File>Save as, and save the report to a location you can find. Post the results here. You'll have to attach the report, as it may be quite large.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline