[ad_inquiry]

I've done everything in my power to remove this virus. Ad-Aware, Spybot, Avira, PandaScan, and Ewido anti-Malware have all been employed during safemode (with the exception of PandaScan) and normal mode. I have cleaned my registry manually and have found that each time I attempt to delete the virus from the registry, it restores itself moments later. Here is my HijackThis log:


Please do not post hijack this logs in any other forum than the malware forum as it will incourage others to do so as well. Your log has been removed and re-attached as a text file




I'm entirely certain that the file C:\WINDOWS\system32\CROSOF~1.NET\RGSVR3~1.EXE is malicious. I'm not sure if I'm overlooking any others or have isolated this as the only one. Can anyone help me figure out how to remove this file from my system? It runs on startup, I can't stop that using RegCleaner OR msconfig.

thanks for the attention,
Addict_Inquiry

[Advertisements]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE.

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.

[fructose]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE.

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.