[KobayashiUK]

New here so please forgive any posting/etiquette mistakes.

I have found P2PNetworking.exe, winupdate.exe and winupdates.exe on my PC. I found these as I suspected infection when unable to run task manager, regedit or CMD.
However, neither Ad-Aware or Spybot nor NAV 2005 have been able to pick up the infections, although there are 'winupdate' and 'winupdates' subfolders containing the exe files in my Program files folder and also prefetch entries in the Window prefetch folder. There are also registry entries in the various Windows/Run... folders.

I couldn't open regedit from the command prompt but could from the exe so did this and deleted the registry references. I also deleted the folder/files and prefetch entries. This has resulted in my Task Manager functionality returning.

I need help (please) with the following:

1) I am still unable to run CMD (CMD.exe is okay), keeps coming up with setver.exebad filename?

2) Are there any other entries I need to look for/delete?

3) Why didn't the above apps. pick up this infection? Should I have used Hijack this instead/as well as?

Best Regards,

Adrian

[Advertisements]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.

[darth_ash]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.