Infected by trojan - help needed

Hello guys,

a trojan infected my system, that is a little bit annoying:
- it disabled the task manager
- it disabled regedit
- it enables/creates 3 autostart-entries at boot/reboot. the files are named audiohd.exe on system32 and winlogon.exe in ...user\appdata\local\temp and are also restored after boot/reboot.

I don't manage to find the system entry for restoring the autostart entries and files. Any idea where to look?

I also need the registration entries, that i can enable the taskmanager and regedit again. Perhaps someone can put them online to download or some other hint to reenable them? Windows 7 x64 Professional is my OS.

Perhaps someone also know a good trojan remover program... i tried some online scanners but they also failed like ESS.

Thanks in advance,

Tim

P

 

try to use combofix. download it herehttp://www.bleepingcomputer.com/download/anti-virus/combofix
use malwarebyte, superantispyware, hitman pro!anything could help you!

 

i'd recommend to do a first clean with a boot-cd from Avira, Kaspersky, UBCD4Win

 

Thanks. it had worked with malwarebytes.

 

ESET Sysrescue!