PDA

View Full Version : Help with Nurech Removal plz!



BroTherHooDJz
2007-03-07, 16:41
im infected wif nurech removal. whenever i reboot comp after i fixed it, it appear infected again.

Heres the result:

Nurech: User settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-1004336348-1979792683-682003330-1004\Software\Microsoft\Windows\ShellNoRoam\MUICache\*\upnp.exe


--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2007-02-12 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-01-15 advcheck.dll (1.2.1.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-01-02 Tools.dll (2.0.1.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-02-28 Includes\Cookies.sbi (*)
2006-12-08 Includes\Dialer.sbi (*)
2007-02-28 Includes\DialerC.sbi (*)
2007-02-07 Includes\Hijackers.sbi (*)
2007-02-28 Includes\HijackersC.sbi (*)
2006-10-27 Includes\Keyloggers.sbi (*)
2007-02-28 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2007-02-14 Includes\Malware.sbi (*)
2007-02-28 Includes\MalwareC.sbi (*)
2007-01-19 Includes\PUPS.sbi (*)
2007-02-28 Includes\PUPSC.sbi (*)
2007-02-28 Includes\Revision.sbi (*)
2006-12-08 Includes\Security.sbi (*)
2007-02-28 Includes\SecurityC.sbi (*)
2007-02-02 Includes\Spybots.sbi (*)
2007-02-28 Includes\SpybotsC.sbi (*)
2005-02-17 Includes\Tracks.uti
2007-02-14 Includes\Trojans.sbi (*)
2007-02-28 Includes\TrojansC.sbi (*)

BroTherHooDJz
2007-03-07, 16:44
I followed the instructions by restarting in safe mode n do a spybot scan. but in safe mode nothing was detected! plz help

tashi
2007-03-07, 20:59
Hello.

See: http://forums.spybot.info/showthread.php?t=11940 Please update your definitions and see if that resolves the problem.

If you need to post in the malware removal forum at any time: "BEFORE you POST" -Preliminary Steps (http://forums.spybot.info/showthread.php?t=288) ;)