Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

(winsync) Trojan Virus

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 1 posts
Hello All,

Here is the problem. This PC is running Windows XP Pro with SP2 and has been updated with all available updates. When you boot the machine and login everything comes up fine, and than after just a few seconds the desktop disappears icons toolbar everything. I pressed ctrl+alt-del and got into the Task Manager and noticed that explorer.exe was missing. I was able to run explorer.exe and the icons and everything came back. I ran the latest version of Hijack this and saw an entry relating to (winsync) entry 04 HKLM\RUN...(winsync)yyyakkk.exe run_reg C:\Windows\System32. This looks like this is a masked file in the system32 dir and nothing I've scanned this PC with detects it. I ran Ad aware, Norton Antivirus Corporate, Panda, cleaned all instances of (winsync) from the registry, ran cc cleaner, deleted all items from Windows Prefetch, and removed all items from startup, but still the problem remains. In Safe mode the PC runs normal this virus only loads during normal operation. This is a good one hopefully someone has seen this before and can help.

Thanks in advance.
  • 0




    Member 2k

  • Retired Staff
  • 2,744 posts
Please Click here!, and follow the recommendations in the guide.

If you're still having trouble, We'll need you to use a free diagnostic tool, Hijack This. Follow the instructions in step five of this guide, and reply here with your log.

Most of what Hijack This lists lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.
  • 0

Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP