I think my registry is messing up cuz when I rebooted this morning my ad-watch monitor was telling me that attempts to change my registry values was occuring. I blocked them all but now some of my path names are messed up and programs are not opening. I don't know if it's a virus or not but it's not letting me open System Restore so I had to play with it until I was able to use the "open with" command and opened System Restore with System Restore by pointing to where the .exe file was located in Windows. After using System Restore it still has the same registry altering attempts as last time and even if I block them it still messes up all my exe files. I can't open anything on my desktop or start menu programs. The only way I was able to open my internet connection and firefox is if I open it quickly after a system restart. I've tried AVG Full system scan and it found nothing, if anyone has any suggestions please let me know. Thanks.
Hi, I am a little hesitant on this one. I had a family member with a problem that sounds very similar to this. I had them run vundofix and it hung the system so it would only boot in safe mode - they decided to work on reinstalling the os-I've had no additional feed back. Their hijackthis log showed a combination of virtumonde, some trojans, and I think smitfraud. No guarantees on what will happen on your system. Tutorials for vundofix and smitfraud fix: http://www.bleepingcomputer.com/forums/topic17258.html http://www.bleepingcomputer.com/forums/topic18610.html But I think I would try this first: You can try steps 8,9,11,and 14 here: http://www.malwarebytes.org/forums/index...5&showtopic=692 Using atf cleaner and superantispyware. Vundofix log at c:\vundofix.txt Smitfraud log at c:\rapport.txt or log, I can't remember which. Hope this helps. Regards. bc
