Infected by trojan - help needed

Discussion in 'ESET Smart Security' started by KOKOtm, Nov 16, 2010.

Thread Status:
Not open for further replies.
  1. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Hello guys,

    a trojan infected my system, that is a little bit annoying:
    - it disabled the task manager
    - it disabled regedit
    - it enables/creates 3 autostart-entries at boot/reboot. the files are named audiohd.exe on system32 and winlogon.exe in ...user\appdata\local\temp and are also restored after boot/reboot.

    I don't manage to find the system entry for restoring the autostart entries and files. Any idea where to look?

    I also need the registration entries, that i can enable the taskmanager and regedit again. Perhaps someone can put them online to download or some other hint to reenable them? Windows 7 x64 Professional is my OS.

    Perhaps someone also know a good trojan remover program... i tried some online scanners but they also failed like ESS.

    Thanks in advance,

    Tim

    P
     
  2. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    408
    Location:
    romania
  3. gambla

    gambla Registered Member

    Joined:
    Sep 4, 2007
    Posts:
    161
    Location:
    Frankfurt, Germany
    i'd recommend to do a first clean with a boot-cd from Avira, Kaspersky, UBCD4Win
     
  4. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Thanks. it had worked with malwarebytes.
     
  5. ESS3

    ESS3 Registered Member

    Joined:
    Dec 11, 2007
    Posts:
    112
    ESET Sysrescue! :)
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.