View Single Post
Old 02-12-2007, 12:16 PM   #2 (permalink)
fredmh
Analyst, Security Team ; TSF Supporter
 
fredmh's Avatar
 
Join Date: May 2006
Location: Phila,Pa
Posts: 2,335
OS: XP


Hello larrygraves , and welcome to TSF


The infection I suspect you have, a variant of Vundo, recognizes HijackThis and prevents HJT from reading the registry locations where it
resides as well as hiding other infections in those locations.


I'd like you to rename HijackThis.exe to doom.exe.
  • Navigate to C:\HIJACK THIS\HijackThis.exe
  • Right click on HijackThis.exe
  • Select 'Rename'
  • Type in doom.exe
  • Press Enter.


Please run a scan with the newly renamed doom.exe and post the new log here.
__________________
fredmh is offline