AntiVirusDisableNotify"=dword:00000000

[edenc]

Hi, I wonder who knows about this!

I have at some point picked up a piece of malware that is avoiding all detection. Yourselves, AVG and Xoftspy!

Whatever IT is, it resets everything in the key
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
and also changes the entry in
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]

I manually change these back by inserting an update file, but they are rechanged at regular intervals. I have stopped all but the absolute necessary of startup processes and removed some dodgy looking entries in my startup.ini.

HELP, it's nicking all my ADSL bandwidth!

Thanks to all in advance

Eden:heart:

[shelf life]

hi edenc,

see this thread about downloading and posting a hjt log.

http://forums.spybot.info/showthread.php?t=288

you might want to do a online scan or two at one of these also:

BitDefender Free Online Virus Scan
http://www.bitdefender.com/scan/licence.php
check AutoClean under Scan Options.

Panda ActiveScan
http://www.pandasoftware.com/products/activescan?NRMODE=Published&NRORIGINALURL=%2factivescan&NRNODEGUID=%7b3B202047-35D4-4DA2-B310-B1DBEC2971F2%7d&NRCACHEHINT=Guest

Kaspersky virus scanner
http://www.kaspersky.com/virusscanner

Housecall at TrendMicro
http://housecall.trendmicro.com/housecall/start_corp.asp
check Auto Clean.

F-Secure virus scanner
http://support.f-secure.com/enu/home/ols.shtml


eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

[tashi]

Due to lack of a response this topic has been archived.
If you need it re-opened please send me a pm and provide a link to the thread.

Applies only to the original topic starter.