Hello, This have been solved on the windows-xp forum:...
We got it! I have used the regmon boot logging as you suggested and in the log I found these 2 lines: [...] 109790: winlogon.exe:1080 DeleteKey...
I went trough it. It is pretty much the way I got rid of it at the beginning. Then after a lot of different checks, my computer was declared clean...
Hello, I tried fixboot and fixmbr but no luck. I will not reinstall immediately so if you have anyother idea, I would be glad to try it....
Hello, 1. I reran combofix but nothing found. 2. I already tried a repair install. I can do a clean install but I was very curious to find...
Hello, Thanks for all your suggestions. 1) Safe mode : already tried but not working. I also tried to apply the reg fix in safe mode and...
Hello, I tried the .reg file from http://www.dougknox.com/xp/file_assoc.htm but it only works until next restart. I have checked the system...
Hello, I tried to create a new user and to make a repair install but both were unsuccessfull. Any other idea? There must some way to know...
I have already tried that. It works at the moment I execute it but the problem appears again at next boot. My registry is modified back and I...
Hello, Thanks for your response. I tried both sfc and chkdsk but no changes. Any other clue? Thanks, Gérard
Hello, I have recently been infected with the 'XP Security 2012' malware. My computer is now clean (confirmed by Broni from malware-virus-removal...
Ok, I understand. I posted on this forum because the problem was created by an infection and that this removal from the registry must be caused by...
No, it doesn't hold. This is very strange.
No, it doesn't hold in safe mode. Is it possible that the settings are suppressed at shutdown?
Hello, Thanks, I'm happy to know that my computer is now clean. Though, I still experience exactly the same problem : on each computer start, I...
Hello, The computer has still the same behaviour. Thanks for reminding me about AVG, I will reinstall it. Here are the logs: =======...
Here is the log (only one locked file detected "sptd "): 2011/08/23 16:11:03.0328 3876 TDSS rootkit removing tool 2.5.17.0 Aug 22 2011...
========== Custom Scans ========== < %SYSTEMDRIVE%\*.* > [2010/08/03 18:17:51 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2010/08/03...
Hello, It is still the same. On each computer start, I cannot start any ".exe" and these registry entries systematically disappear from the...
Here is the ComboFix log: ComboFix 11-08-18.03 - vostropc4 19/08/2011 9:39.2.1 - x86 Microsoft Windows XP Professional...
Separate names with a comma.
