HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()

BullGuard Antivirus Forum > Virus Removal > Removal Help > HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()

Forum Quick Jump

$Post reply to : HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Printable version of : HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

[ << Previous Thread | Next Thread >> ]

BliZoR
New Member

Date Joined Apr 2004
Total Posts : 2

Posted 4-25-2004 1:54 (GMT +2)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

I got a really big problem... this file is defected

HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()

HKEY_CURRENT_USER:Software\Microsoft\Windows\Currentversion\Policies\Sytem"disableTaskMgr ()

What im gonna do for get them Undefected? Its some .reg files But Panda Titanium Antivirus 2004 cant find a trojan / virus in it freaked

plz help me... confused

This pictures is from when i scan with ad aware... i delete the file and if i reboot its there agian. But when i start up my firewall show up and tell me it try to connect to

IP: 212.78.204.110:http

http://members.lycos.co.uk/nowbob/fonts/add.php?action=logip=192.168.209.3

Post Edited (BliZoR) : 4/25/2004 12:09:18 PM GMT

Image Attachment :

WHAT THE FUCK!!!!.JPG 79KB (image/pjpeg)

This image has been viewed 2006 time(s).

Destroyer
Trusted Member

Date Joined Mar 2004
Total Posts : 245

Posted 4-25-2004 5:46 (GMT +2)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

Tried scanning in safe mode ???

BliZoR
New Member

Date Joined Apr 2004
Total Posts : 2

Posted 4-25-2004 10:10 (GMT +2)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

Hmm... im using windows XP, haw to start in safe mode?

asaygo
Junior Member

Date Joined Apr 2007
Total Posts : 60

Posted 5-15-2007 9:25 (GMT +2)

$Quote: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$ $Alert an admin about: HKEY_LOCAL_MACHINE:SOFTWARE\Microsoft\windows NT\CurrentVersion\Winlogon"shell" ()$

Informations on how to start the computer in Safe Mode, can be found in the BullGuard Tech Guides: How to start in Safe Mode

Post Edited (asaygo) : 11-06-2007 05:34:09 GMT

Forum Information

Currently it is Saturday, October 11, 2008 12:23 AM (GMT +2)
There are a total of 62.715 posts in 15.645 threads.
In the last 3 days there were 40 new threads and 108 reply posts. View Active Threads

Who's Online

This forum has 26697 registered members. Please welcome our newest member, summe.
20 Guest(s), 0 Registered Member(s) are currently online. Details

5 Latest Threads

Computer problem (4)	10-10-2008 21:56:23 (sher87)
Sony Ericsson w350i is infected with New Folder.exe virus (0)	10-10-2008 19:49:00 (sreenath22)
Wholesale jordan1-23 shoes,shirt,polo,evisu,duck,ugg,gucci,coogi,coach handbag (0)	10-10-2008 19:20:31 (mytrader)
Joran shoes (0)	10-10-2008 19:18:09 (mytrader)
Wholesale jordan,nike,ugg,gucci,coogi,evisu,polo,duck,shoes,jeans,clothes (0)	10-10-2008 19:10:36 (mytrader)

Need Support? Write to:

| Forum Help Manual

Download free trial version of Bullguard