All looks fine there. Lets check another policies key. Paste the following into a command window and post the resulting text file. reg query...
Did you by chance get the packages in the E:\SOFTWARE folder via uTorrent, another P2P app or a crack site? Several are infected. AVG...
Excellent! Glad I could help. :) Geri has posted some very helpful information and recommendations regarding future protection in the following...
The command removed the hidden and system attributes. Would have been advisable to analyze the file before deleting it though. Thanks for the...
Great! Happy to help, and you're most welcome. :) Geri has posted some very helpful information and recommendations regarding future protection...
:D You're very welcome!
Click here to run clock_fix You can either save it or run it ... doesn't matter. Let me know how it turns out please :)
Please copy the bolded command below. attrib -h -s C:\WINDOWS\system32\ntv32.exe Click Start>Run and type cmd then hit Enter to open a...
Registry export looks fine :) Paste the following in a command window and post the results. reg query...
Nevermind, I see it now. :rolleyes: Skrivebord
Paste the following in a command window and post the resulting log. reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" |...
Glad to hear 2 things. 1. No infection 2. It's all working again :D Those settings are all stored in the registry. Could be a failing...
Right click the key and select Permissions. If you get a message about no privleges then nothing happens, right click and select Permissions...
HijackThis log is clean, and MBAM cleaned up what I could identify, so lets get another opinion from an online scanner, and if all good, you're...
Hi baka, Yes, see if you can re-enable System Restore and let me know. Things are looking good. Lets get an online scan done. Please scan...
Great! :) Happy to help, and you're quite welcome! Geri has posted some very helpful information and recommendations regarding future...
Glad to hear it Nicko. You're most welcome. :) Geri has posted some very helpful information and recommendations regarding future protection in...
ComboFix will create a run entry for itself if it's required to reboot the machine, however, I've never heard of it creating one for grpconv.exe,...
Download ComboFix by sUBs from here, saving the file to your desktop. Please disable realtime protection applications as they sometimes...
Looks great! Just a couple of Java temp files infected. The rest are all in quarantine by Deckards and ComboFix, and in System Restore points....
Separate names with a comma.
