Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\C


  • Please log in to reply

#1
AlienwareAurora

AlienwareAurora

    New Member

  • Member
  • Pip
  • 7 posts
Hello, my MalwareBytes Security program detected a virus, I have a very expensive computer, and I have way too many programs on here that will take forever to reinstall, so reformatting is out of the question.

The potential virus can be found here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

Now in this folder are these 3 folders:
egui.exe
ekrn.exe
IEInstal


equi and ekrn are both NOD32 Execution files, and I am assuming the virus is trying to block NOD32.

Posted Image

Now when I try to delete these, Error while deleting key.

Posted Image

So then, I try to give myself permissions because I am on a ADMIN account. and it says access denied.

Posted Image
Note: I have tried to give other users permission, and it gives the same error.
I can't do anything at all, and I believe the virus was meant to keep it this way.
Now what I need help on is to remove these registry keys, or have access to them. I have tried many methods on regaining control with no luck.

I am running on Windows 7, and these are my only 2 infected registry keys, and I don't want this virus to spread on my beautiful machine.
I am willing to pay money to who ever can fix my problem, thanks.

Note: I have provided colored text and Pictures to help you guys understand it more clearly.

Edited by AlienwareAurora, 09 May 2010 - 06:28 PM.

  • 0

Advertisements


#2
FNP

FNP

    Member

  • Member
  • PipPipPip
  • 606 posts
AlienwareAurora-

Hi and welcome to Geeks to Go! :)

I suggest taking a look at the Malware and Spyware Cleaning Guide. This will help you disinfect the majority of malicious software from your system. If that doesn't solve your problem, post a new thread in the Virus, Spyware and Trojan Removal Forum.

If you are still having problems after being given a clean bill of health from the malware expert, then please return to this thread and we will pursue other options to help you solve your current problem(s).



FOOTNOTE: Also, as an FYI, egui.exe and ekrn.exe are processes for ESET Smart Security system- wouldn't want to delete those! :)

Edited by FNP, 09 May 2010 - 06:35 PM.

  • 0

#3
AlienwareAurora

AlienwareAurora

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts

AlienwareAurora-

Hi and welcome to Geeks to Go! :)

I suggest taking a look at the Malware and Spyware Cleaning Guide. This will help you disinfect the majority of malicious software from your system. If that doesn't solve your problem, post a new thread in the Virus, Spyware and Trojan Removal Forum.

If you are still having problems after being given a clean bill of health from the malware expert, then please return to this thread and we will pursue other options to help you solve your current problem(s).



FOOTNOTE: Also, as an FYI, egui.exe and ekrn.exe are processes for ESET Smart Security system- wouldn't want to delete those! :)


So you are telling me NOD32 itself put them there? If so, Do I have to worry about a virus? Because MalwareBytes is a very trusted program, and I doubt it would treat those 2 files potentially infected.
  • 0

#4
DavePaulson

DavePaulson

    Member

  • Member
  • PipPipPip
  • 145 posts
Hi AlienwareAurora-
Malware removal advice is not given in this forum. I see you have a post in the correct forum. If you read the link to the Malware and Spyware Cleaning Guide FNP gave you it will expedite the process. There are some real competent people there that will help you with your problem.

Dave
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP