Infected by trojan - help needed

Discussion in 'ESET Smart Security' started by KOKOtm, Nov 16, 2010.

Thread Status:
Not open for further replies.
  1. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Hello guys,

    a trojan infected my system, that is a little bit annoying:
    - it disabled the task manager
    - it disabled regedit
    - it enables/creates 3 autostart-entries at boot/reboot. the files are named audiohd.exe on system32 and winlogon.exe in ...user\appdata\local\temp and are also restored after boot/reboot.

    I don't manage to find the system entry for restoring the autostart entries and files. Any idea where to look?

    I also need the registration entries, that i can enable the taskmanager and regedit again. Perhaps someone can put them online to download or some other hint to reenable them? Windows 7 x64 Professional is my OS.

    Perhaps someone also know a good trojan remover program... i tried some online scanners but they also failed like ESS.

    Thanks in advance,

    Tim

    P
     
  2. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    408
    Location:
    romania
  3. gambla

    gambla Registered Member

    Joined:
    Sep 4, 2007
    Posts:
    161
    Location:
    Frankfurt, Germany
    i'd recommend to do a first clean with a boot-cd from Avira, Kaspersky, UBCD4Win
     
  4. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Thanks. it had worked with malwarebytes.
     
  5. ESS3

    ESS3 Registered Member

    Joined:
    Dec 11, 2007
    Posts:
    112
    ESET Sysrescue! :)
     
Thread Status:
Not open for further replies.