Forum Home
Press F1
 
Thread ID: 104330 2009-10-24 11:17:00 Win32:Malob-X[Cryp] bk T (215) Press F1
Post ID Timestamp Content User
823686 2009-10-25 09:11:00 svchost.exe is taking up all the CPU usage, btw what's SR? bk T (215)
823687 2009-10-25 09:20:00 System Restore CYaBro (73)
823688 2009-10-25 09:30:00 Already turned off. Scanning with Super Anti-Spyware at the moment. bk T (215)
823689 2009-10-25 21:55:00 Also, notice that "O4 - HKLM\..\Run: [restorer64_a] C:\WINDOWS\system32\restorer64_a.exe"

has returned.

Seems to be a tricky and nasty item.

How to remove it permanently?

Is super Anti-spyware safe to use? It claims that it can remove the above.

This Trojan has a registry entry that you will have to find. It is also run by a hidden driver that will also need to be remove.
Pancake (6359)
823690 2009-10-26 12:28:00 Scan hard drive in another PC or use bootable scanner CD

download.bitdefender.com (probably a lot faster)
or
ftp://ftp.drweb.com/pub/drweb/livecd/

Make sure you have internet connection so it can update virus definitions
Agent_24 (57)
1 2