HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()

BullGuard Antivirus Forum > Virus Removal > Removal Help > HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()

Forum Quick Jump

$Post reply to : HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Printable version of : HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

[ << Previous Thread | Next Thread >> ]

BliZoR
New Member

Date Joined Apr 2004
Total Posts : 2

Posted 4-25-2004 12:54 (GMT +1)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

I got a really big problem... this file is defected

HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()

HKEY_CURRENT_USER:Software\Microsoft\Windows\Currentversion\Policies\Sytem"disableTaskMgr ()

What im gonna do for get them Undefected? Its some .reg files But Panda Titanium Antivirus 2004 cant find a trojan / virus in it freaked

plz help me... confused

This pictures is from when i scan with ad aware... i delete the file and if i reboot its there agian. But when i start up my firewall show up and tell me it try to connect to

IP: 212.78.204.110:http

http://members.lycos.co.uk/nowbob/fonts/add.php?action=logip=192.168.209.3

Post Edited (BliZoR) : 4/25/2004 12:09:18 PM GMT

Image Attachment :

WHAT THE FUCK!!!!.JPG 79KB (image/pjpeg)

This image has been viewed 2699 time(s).

Destroyer
Trusted Member

Date Joined Mar 2004
Total Posts : 245

Posted 4-25-2004 4:46 (GMT +1)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

Tried scanning in safe mode ???

BliZoR
New Member

Date Joined Apr 2004
Total Posts : 2

Posted 4-25-2004 9:10 (GMT +1)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

Hmm... im using windows XP, haw to start in safe mode?

asaygo
Junior Member

Date Joined Apr 2007
Total Posts : 60

Posted 5-15-2007 8:25 (GMT +1)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

Informations on how to start the computer in Safe Mode, can be found in the BullGuard Tech Guides: How to start in Safe Mode

Post Edited (asaygo) : 11-06-2007 05:34:09 GMT

Forum Information

Currently it is Saturday, November 21, 2009 5:20 PM (GMT +1)
There are a total of 73.034 posts in 17.116 threads.
In the last 3 days there were 14 new threads and 69 reply posts. View Active Threads

Who's Online

This forum has 30334 registered members. Please welcome our newest member, sushil.
39 Guest(s), 0 Registered Member(s) are currently online. Details

5 Latest Threads

Constant scanning andskipped files? (3)	21-11-2009 14:33:51 (Dickens)
Cannot install anti-virus softeware or do window updates... need help (17)	21-11-2009 13:46:11 (superjesse)
Michael Vick jerseys (1)	21-11-2009 09:42:37 (Dickens)
Arizona Cardinals Jerseys (1)	21-11-2009 09:37:23 (Dickens)
How to remove this Malware/Virus (0)	21-11-2009 06:54:16 (bozzack)

Need Support? Write to:

| Forum Help Manual

Download free trial version of Bullguard