PDA

View Full Version : Infected by explorer.exe and xmss.exe that will affect start-up/auto play programs in



jao_madn
2008-01-13, 13:38
hi about this explorer.exe and xmss that exe is this normal in my system

Few days fast when my S&D tea timer detected this two .exe file that will write to the registry entry when i used my friend USB flashdrive i permanently block by remembering or putting in the blacklist but this two will be really want to write in the registry and it is very anoying because the tea timer will pop-up everysecond or keep on pop up in the top of all windows since i block it in the block list.i search this two file and delete it in my system and solve the problem but have some undesired result because my system had lost the start-up when something put in like USB flash drive or DVD and CD, the autoplay has dis able i look and done already in the hardware and enable the autoplay but still doesn,t work hope you can help me,

and in few days i used again the USB but not the same is used before but this one also infected since antivirus detected some of them. and this two problem again happens. and i noticed that the startup or autoplay is ok if this two file is my system but i know that this two files is infected since my taskmenu is disable i cannot open it, my regedit in the run command has gone and others *.msc config in the run command in the start menu has malfunctioning.
i already send this two files in S&D detection group since i installed there program but the say it is a startup program.Trend micro, S&D, Superantispyware did't detect this two file has problem.i installed reganylizer and found this two file in the reg. at winlogon dir.

is ther someone know or happen to them i know how to solved this problem

hope someone help..