HKCU\\Run : cdloader ("C:\Documents and Settings\Timothy Narva\Application Data\mjusbsp\cdloader2.exe" MAGICJACK) -> FOUND HKCU\\Run : SansaDispatch (C:\Documents and Settings\Timothy Narva\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe) -> FOUND magicJack.exe - c:\documents and settings\timothy narva\application data\mjusbsp\magicjack.exe -> KILLED SansaDispatch.exe - c:\documents and settings\timothy narva\application data\sandisk\sansa updater\sansadispatch.exe -> KILLED Operating System: Windows XP ( Service Pack 3) 32 bits version Here is a summary of the RogueKiller scan: I have completed your recommendations above. ![]() Please post the contents of the RKreport.txt in your next Reply. If it really does not work (it could happen), rename it to winlogon.exe If the program is blocked, do not hesitate to try several times.The RKreport.txt shall be generated next to the executable.For Vista/Seven, right click -> run as administrator, for XP simply run RogueKiller.exe.If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run. ![]() This program will remove the H, or hidden, attribute from all the files on your hard drives. ![]() Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. To make your files visible again, please download the following program to your desktop: This infection family will hide all the files on your computer from being seen. My name is Matt and I will be assisting you. Welcome to the Malwarebytes Support Forum
0 Comments
Leave a Reply. |