CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

zafi and JS_inor.m removal

 
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> AntiVir Personal Edition Classic [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
moi

Cadet
Cadet


Joined: Dec 02, 2003
Posts: 6
Location: USA

PostPosted: Tue Jun 22, 2004 11:34 pm    Post subject: zafi and JS_inor.m removal
Reply with quote

Both Subject baddies keep returning to my registry after I delete them there.
CU\Soft\MS\Search Asst\ACMRU\5603

Need to permantly remove from computer (of course!).
Have search entire Reg and HD and SYS but cannot find the little toy that is "renewing" them. Appreciate your help.moi

Back to top
View users profile Send private message Send email
mrrockford

News Admin
News Admin
AVPE Host
AVPE Host

Joined: Apr 24, 2004
Posts: 3010

Forums Admin MVP Premium Team F@H

PostPosted: Wed Jun 23, 2004 5:20 am    Post subject:
Reply with quote

Howdy,

Try an online scan like this one:

http://www.ravantivirus.com/scan/

let it autoclean. Reboot, scan your system with your AV, if it is clean - great, if the problem still exists on your system please do this.

Download "Hijack This!", if you don't already have it.
Save it in a permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and post your log in the

Hijackthis - Spyware, Viruses, Worms, Trojans Oh My! Forum.

Most of what it lists will be harmless or even essential, don't fix anything yet.

When you post in the other forum please explain your problem again in detail so that the experts in the HJT forum will have the complete picture. Someone will be along to help you, but please be patient as the experts are very busy as of late!!

If you start a new thread in Hijackthis - Spyware, Viruses, Worms, Trojans Oh My!, please post back here to let me know so that we can close this thread.


_________________
"Anyone who considers protocol unimportant has never dealt with a cat."

L. Long
Back to top
View users profile Send private message Visit posters website
Prince_Serendip

Site Moderator


Joined: Sep 07, 2002
Posts: 17542

1st Responders MIRT Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Rootkit Responders

PostPosted: Wed Jun 23, 2004 3:19 pm    Post subject:
Reply with quote

Would it work to do a full AVPE scan in safemode?

Worth a try?

Safemode for all platforms: http://www.pchell.com/support/safemode.shtml


_______________________________________
NOTE FROM FORUM HOSTS: This thread is now closed. Should you need it reopened, please PM a Host/mod. Everyone else having a similar issue, please launch a new topic for yourselves. Thank you.


_________________
image
Microsoft MVP Consumer Security 2006, 2007 & 2008
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> AntiVir Personal Edition Classic All times are GMT
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer