O2 - BHO: (no name) - C:\WINDOWS\System32\msdxm. SUPERAntiSpyware can safely remove WINSECURE32.EXE - and protect your computer from spyware, malware, ransomware, adware, rootkits, worms, trojans, keyloggers, bots and other. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = į2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = When spreading it can exploit several vulnerabilities: RPC/DCOM and RPC/Locator is used when the worm tries to spread automatically. R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = my pc had the agobot virus it would keep remaking itself when I would delete it I tried several virus scans nothing would remove it. Agobot is an IRC-controlled backdoor with network spreading capabilities. MSIE: Internet Explorer v6.00 SP1 (.1106)Ĭ:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeĬ:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exeĬ:\Program Files\Free History Eraser\historyeraser.exeĬ:\Program Files\Siber Systems\AI RoboForm\RoboFormWatcher.exeĬ:\Program Files\Internet Explorer\iexplore.exeĬ:\PROGRA~1\COMMON~1\EACCEL~1\EANTHT~1\eanthtutor.exeĬ:\Program Files\Outlook Express\msimn.exeĬ:\PROGRA~1\ACCELE~1\ANTI-V~1\DEFSCA~1.EXEĬ:\PROGRA~1\ACCELE~1\SYSTEM~1\sys_alert.exeĬ:\PROGRA~1\COMMON~1\EACCEL~1\EANTHO~1.EXEĬ:\Documents and Settings\Owner\Desktop\HijackThis.exe
I have used the Hijackthis software.with some systems running and have come up with this. Seems I have been infected with this dreaded worm.
0 kommentar(er)
