In the registry under the following key.....
HKEY_LOCAL_MACHINE\Microso
Look for a subkey named Explorer.exe. If it exists, kill it......
Also, check to see what the size of services.exe is, and make sure it is signed by MS. Can easily extract another copy from your CD, or see if there is a replacement in C:\WINNT\System32\DLLCache
Main Topics
Browse All Topics





by: johnb6767Posted on 2009-04-21 at 16:15:11ID: 24200224
I would actually do a few things first........Install and update Super Anti Spyware and reboot to Safe Mode. Then do a full scan, and see what it finds. Or, if you prefer, scan with MalwareBytes....
e.com/
e.com/defi nitions.
g/
ges.com/
rivers in the list, or just look for the summary, for any hidden files/services/processes/d rivers in the lower left hand corner.....
SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware!
http://www.superantispywar
One of the best on the market (and it is free, although you can upgrade and get Real Time Protection). Under the Options, go to Scanning Control> and make sure it is set to the following.....
Terminate memory threats - checked
Ignore non executable files - unchecked
Scan only known file types - unchecked
Manual Definitions Download....
http://www.superantispywar
MalwareBytes
http://www.malwarebytes.or
Also.....
RootRepeal - RootRepeal - Rootkit Detector
http://rootrepeal.googlepa
Under each tab, hit the Scan button, and see if you get any RED files/services/processes/d