Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

(winsync) Trojan Virus


  • Please log in to reply

#1
XPADMIN1

XPADMIN1

    New Member

  • Member
  • Pip
  • 1 posts
Hello All,


Here is the problem. This PC is running Windows XP Pro with SP2 and has been updated with all available updates. When you boot the machine and login everything comes up fine, and than after just a few seconds the desktop disappears icons toolbar everything. I pressed ctrl+alt-del and got into the Task Manager and noticed that explorer.exe was missing. I was able to run explorer.exe and the icons and everything came back. I ran the latest version of Hijack this and saw an entry relating to (winsync) entry 04 HKLM\RUN...(winsync)yyyakkk.exe run_reg C:\Windows\System32. This looks like this is a masked file in the system32 dir and nothing I've scanned this PC with detects it. I ran Ad aware, Norton Antivirus Corporate, Panda, cleaned all instances of (winsync) from the registry, ran cc cleaner, deleted all items from Windows Prefetch, and removed all items from startup, but still the problem remains. In Safe mode the PC runs normal this virus only loads during normal operation. This is a good one hopefully someone has seen this before and can help.

Thanks in advance.
  • 0

Advertisements


#2
Armodeluxe

Armodeluxe

    Member 2k

  • Retired Staff
  • 2,744 posts
Please Click here!, and follow the recommendations in the guide.

If you're still having trouble, We'll need you to use a free diagnostic tool, Hijack This. Follow the instructions in step five of this guide, and reply here with your log.

Most of what Hijack This lists lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP