![]() |
|
#1
|
|||
|
|||
|
Hello,
I've logged on to my computer and find that there are two strange boxes flying around my desktop, entitled "Thayet Myo Hacking Day!". I can't also open up task manager, and all my desktop icons became red. Is it a virus? I have ESet Smart Security v3.0.684 on my Pc. So please help me to solve this problem Thanks for your helps |
|
#2
|
|||
|
|||
|
It sounds like a simple VB script changed certain registry entries. A log from SysInspector (ESI) would shed more details. Please contact customer care and provide them with the log from ESI.
|
|
#3
|
||||
|
||||
|
No, i think this one appeared first time in Nobember 2008. Its a Trojan and a very nasty one.
AV which are up to date should be able to remove it. If not: Do the following steps with causion (backup registry or make image of partition 'C') ! NOT TESTED! Also following was reported when trying to boot in to Windows Safe mode: Quote:
So please read this first: http://pcsupport.about.com/od/findby...singhaldll.htm Possibility to remove the Trojan: Start the system in SAFE mood. Delete the explorer.exe files in C:\RECYCLER, c:\Windows\Backup and C:\. Open the Regedit and delete explorer.exe in hkey_local_machine/software/microsoft/windows/current version/run (or) hkey_current_user/software/microsoft/windows/current version/run. You also need to uninstall the programs if the shortcut to that programs appear as archive icon.
__________________
Ciao Tommy Member of ASAP System: Windows XP SP2 | Vaio Laptop Security Setup: Avira Premium | Jetico 2 Last edited by Tommy : March 1st, 2009 at 01:00 PM. |
|
#4
|
||||
|
||||
|
If you locate a new suspicious file you will want to follow these steps but as Marcos recommend I suggest you create a log using ESET SysInspector and email it to support("at")eset[dot]com.
Remember to include as much detail as possible in your email.
__________________
OpenDNS with DNSCrypt SSD: Windows 8 Pro x64 | IE10 (Enhanced Protected Mode) & Fanboy's TPLs HDD: Xubuntu 12.04 LTS (x64) | Firefox: ABP(Fanboy's list) & HTTPS Everywhere |
| « Previous Thread | Next Thread » |
| Thread Tools | Search this Thread |
|
|