Forum Home
Press F1
 
Thread ID: 92245 2008-08-03 06:53:00 HJT and AVG 7.5 trojan...pls help!!! puffins808 (14043) Press F1
Post ID Timestamp Content User
694636 2008-08-05 07:32:00 Thank you for the explanation. Keeps me knowledgable. As for the C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean. exe - has a *known* Malware I thought I removed that. When I ran the scan again it did not come back with anything and also ran it disabling avast. Hmmm....what do I do now...find it in the registry. BTW I never found xpupdate and spyshredder...should I search for that in the registry as well?

If you were to choose which is the best: IrfanView or MWSnap? Or do you have one you recommend that is freeware that will not have any harmful downloads with it.
puffins808 (14043)
694637 2008-08-05 07:39:00 See if Regpowercleaner, and Spyshredder are in control panel / add/remove programs, just to make sure theyre not on the system

That Xpudate looks like it belongs to Spyshredder as well.

I've never used or heard of MWsnap. Irfanview is free and free of nasties

There's also Photo Story (www.microsoft.com) which is free.

And Picasa (http://picasa.google.com/)
Speedy Gonzales (78)
694638 2008-08-05 07:48:00 Neither is not in the add/remove.

Uh oh...this jut popped up as I am replying to you from FastScan:

The regfile\shell\open\command key in the windows registry appears to have been modified. The current looks like this:
regedit.exe "%1" %*

Would you like Trojan Remover to reset this registry key [recommended]

Yes No

What do I do...help!!
puffins808 (14043)
694639 2008-08-05 08:17:00 Click on yes then reboot Speedy Gonzales (78)
694640 2008-08-05 08:28:00 Ok...I did what you said and it finished it fastscan. I rebooted. Why did it do that? I did not change anything.

So, since spryshredder and xpupdate is not in add/remove, do I go to registry and find them and delete them?

As for C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean. exe, what do I do?
puffins808 (14043)
694641 2008-08-05 08:31:00 If those entries arent there dont worry about it.

Trojan remover or malwarebytes must have removed them
Speedy Gonzales (78)
694642 2008-08-05 08:34:00 Thanks again...your the best...life saver!!! When ever I get a message from those programs should I come here and ask or just hit yes? If I ask another question, do I get you or someone else? puffins808 (14043)
694643 2008-08-05 08:56:00 I took your advise and did the defrag in safe mode but...it when through the analyzing portion and completed but when it when to the next phase it stayed on 1% and did not go any further. puffins808 (14043)
694644 2008-08-05 09:08:00 Give it time Speedy Gonzales (78)
694645 2008-08-05 10:12:00 Just finished. Thank you! puffins808 (14043)
1 2 3 4