From: Dina on
Running XP, SP 2

This program started and I know it's a virus. I ran Malwarebytes in safe
mode and it removed 3 infected files from the registry: antivirus disable
notify, firewall disable notify and updates disable notify. I reboot and the
program was back. I then removed them manually in safe mode. I reboot and
it was back again. It has also disabled my internet. Last update in
Malwarebytes was 12/2009.

What can I do to fix this?

Dina

From: "FromTheRafters" erratic on
"Dina" <Dina(a)discussions.microsoft.com> wrote in message
news:BD5EDE36-6E65-4186-9050-7836478B702A(a)microsoft.com...
> Running XP, SP 2
>
> This program started and I know it's a virus. I ran Malwarebytes in
> safe
> mode and it removed 3 infected files from the registry: antivirus
> disable
> notify, firewall disable notify and updates disable notify. I reboot
> and the
> program was back. I then removed them manually in safe mode. I
> reboot and
> it was back again. It has also disabled my internet. Last update in
> Malwarebytes was 12/2009.
>
> What can I do to fix this?

I suggest going to bleepingcomputer.com to see the latest fixes.
Sometimes they are a little behind also, but they do very well keeping
up with the latest tricks used to foil antimalware applications.

Sometimes Malwarebytes' Anti-Malware is enough, sometimes rkill (pick a
flavor) followed by MBAM and/or SAS - and sometimes you need a rootkit
detector first. Sometimes guided help is the answer (combofix, hjt).


From: "FromTheRafters" erratic on
"Dina" <Dina(a)discussions.microsoft.com> wrote in message
news:BD5EDE36-6E65-4186-9050-7836478B702A(a)microsoft.com...
> Running XP, SP 2
>
> This program started and I know it's a virus.

Except, that it isn't. A virus is a specific kind of malware, and this
is another kind.


From: David H. Lipman on
From: "FromTheRafters" <erratic @nomail.afraid.org>

| "Dina" <Dina(a)discussions.microsoft.com> wrote in message
| news:BD5EDE36-6E65-4186-9050-7836478B702A(a)microsoft.com...
>> Running XP, SP 2

>> This program started and I know it's a virus.

| Except, that it isn't. A virus is a specific kind of malware, and this
| is another kind.


/ Thank you ! /

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: "FromTheRafters" erratic on

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eMvqMxgvKHA.4752(a)TK2MSFTNGP04.phx.gbl...
> From: "FromTheRafters" <erratic @nomail.afraid.org>
>
> | "Dina" <Dina(a)discussions.microsoft.com> wrote in message
> | news:BD5EDE36-6E65-4186-9050-7836478B702A(a)microsoft.com...
>>> Running XP, SP 2
>
>>> This program started and I know it's a virus.
>
> | Except, that it isn't. A virus is a specific kind of malware, and
> this
> | is another kind.
>
>
> / Thank you ! /

It's a constant battle. :o)