 |
 |
| ActiveWin | Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0 |
|
|
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
Active Network |
|
ActiveMac |
|
ActiveWin |
|
ActiveXbox |
|
DirectX |
|
Downloads |
|
FAQs |
|
Interviews |
|
MS Games & Hardware |
|
Reviews |
|
Rocky Bytes |
|
Support Center |
|
TopTechTips |
|
Windows 2000 |
|
Windows Me |
|
Windows Server 2003 |
|
Windows Vista |
|
Windows XP |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
Apple/Mac |
|
Xbox/Xbox 360 |
|
News Search |
|
XML/RSS Newsfeeds |
|
Pocket PC Site |
|
|
|
|
|
|
|
FAQ's |
|
Windows Vista |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows Server 2003 |
|
Windows XP |
|
Windows 7 |
|
Windows 8 |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox 360 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
Latest Reviews |
|
Xbox/Games |
|
Fable 2 |
|
|
|
Applications |
|
Windows Server 2008 R2 |
|
Windows 7 |
|
Adobe CS5 Master Collection |
|
|
|
Hardware |
|
Microsoft Express Mouse |
|
|
|
|
|
|
|
Latest Interviews |
|
Mike Swanson |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Advertise |
|
Affiliates |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
Recommended Links:
Play your favourite online pokies and take what you win fast at the same day withdrawal online casinos in Australia.
light tower
buy arabic Twitter follower
buy spotify real followers
A great website to buy Facebook followers from is BRSM. They have a great track record!
the Binary Option Robot
Get Windows Tablet & Phones at DHgate.com
| Can't fully remove Virus from system |
| Forum: Windows XP |
|
Read Only Forum Back to Windows XP All Forums |
Displaying Posts 1 through 4 of 4 |
This is an archived static copy of ActiveWin.com. |
| #1 By 166989 (65.92.66.13) at Friday, November 28, 2008 11:30:14 AM |
| I'm trying to fully delete a virus from my computer and I'm stuck. I don't know the name of the virus, but it is the one that says your computer is infected and starts doing a scan. Then, your IE will be redirected to ad sites every couple of minutes. I used Malwarebytes to remove the virus, but there are a couple of things I can't fix. 1) Can't remove these keys from the registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run kikewupli REG_SZ Rundll32.exe "C:\WINDOWS\system32\wehebopa.dll",s The name of the dll keeps changing (jazejumi.dll, vagazodi.dll) The key is recreated almost immediately after I delete it. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c48f83f8-8ac1-46ec-98ec-355e39506cf2} I tried adding the "NoExplorer REG_DWORD 1" but that didn't work. In Internet Explorer (Tools/Internet Options/Programs/Manage Add-ons) it shows up as: hulahake.dll. Each time I disable it and restart IE, it is enabled again. Currently, I'm using Internet Explorer (with no add-ons) which seems to prevent being redirected. 2) The virus starts my internet connection and connects to the internet by itself. After it does this, the names of the dll's have changed and I'm back to square one. Can someone please help me find out how the fully remove this virus? Please. |
| #2 By 655 (68.88.4.169) at Friday, November 28, 2008 04:51:40 PM |
| I'm assuming you're running no antivirus at present. Try rebooting into safe mode and install a good AV program (i.e. Kaspersky or Avast, which is free). Choose to have a full boot scan done at startup and go from there. ---------------------------------------------- Work is for people who don't know how to surf Gateway 15.4" Laptop, Windows Vista Ultimate/Server 2008, Photoshop CS3, Nikon D200 |
| #3 By 166989 (65.92.65.165) at Saturday, November 29, 2008 11:53:31 AM |
|
I have Norton Antivirus. Also I'm using Malwarebytes and Spybot Search and Destroy.
I've run full system scans 10+ times with each. And, I've flashed the BIOS.
I've got to find out why I can't delete those keys from the registry.
CH
This post was last edited by Crazyhorse33 on Saturday, November 29, 2008 11:56:33 AM. |
| #4 By 166989 (69.159.41.117) at Monday, December 01, 2008 12:18:47 PM |
|
It looks like my regsvc.dll is infected. That would explain why I can't change my registry and why it tried to connect to the Internet.
Anyone know how to fix this?
thanks,
CH
This post was last edited by Crazyhorse33 on Monday, December 01, 2008 12:20:06 PM. |
