![]() |
|
#1
|
|||
|
|||
|
A userinit hijack was left on a laptop after a Malwarebytes clean & then a Prevx clean. I had to use Combofix to clean it. It was a definite infection, being picked up by HijackThis & it was continually changing the IE homepage & search defaults as well as making bootup very slow.
I'm a little concerned why did Prevx not see this infection?
__________________
Windows 7 32bit Ultimate SP1 | MS ISA 2004 Firewall | Malwarebytes | Firefox with NoScript | Acronis True Image |
|
#2
|
||||
|
||||
|
Hello,
It's hard to say without further information - could you get a scan log from this user's PC or a copy of any samples if they still have them? Thanks! |
|
#3
|
|||
|
|||
|
Sorry Joe, it's an end user pc. I was just surprised that Prevx didn't pick it up when it was glaringly obvious in HijackThis.
__________________
Windows 7 32bit Ultimate SP1 | MS ISA 2004 Firewall | Malwarebytes | Firefox with NoScript | Acronis True Image |
| « Previous Thread | Next Thread » |
| Thread Tools | Search this Thread |
|
|