I am infected, please help

hi, the system is working pretty great now and i did all you told me to do in the previous post but i have a few questions...

i tried to reinstall spybot search and destroy but it is saying that spybotsd.exe is read only and so it wont work. any suggestions?

also spyware doctor popped up and said i had 5 threats and 19 infections but when i scanned with malwarebytes anti-malware nothing was found. there were 4 high alerts, trojan downloaders, 2 in registry key and 2 in registry value. i only have the trial version of spyware doctor so i cant try to get rid of them.
 
11/4/2009 10:20:34 PM:218 Infection was detected on this computer
Threat Name - Trojan.Downloader
Type - Registry Key
Risk Level - High
Infection - HKEY_USERS\S-1-5-21-2761955172-2059558153-1537524497-1006\Software\Classes\CLSID\{89b3ae4d-399c-4df9-b36a-ffa91f6c99ea}


11/4/2009 10:21:10 PM:937 Infection was detected on this computer
Threat Name - Trojan.Downloader
Type - Registry Value
Risk Level - High
Infection - HKEY_USERS\S-1-5-21-2761955172-2059558153-1537524497-1006\Software\Classes\CLSID\{89b3ae4d-399c-4df9-b36a-ffa91f6c99ea}\InProcServer32, (Default)


11/4/2009 10:21:10 PM:953 Infection was detected on this computer
Threat Name - Trojan.Downloader
Type - Registry Value
Risk Level - High
Infection - HKEY_USERS\S-1-5-21-2761955172-2059558153-1537524497-1006\Software\Classes\CLSID\{89b3ae4d-399c-4df9-b36a-ffa91f6c99ea}\InProcServer32, ThreadingModel


11/4/2009 10:21:11 PM:15 Infection was detected on this computer
Threat Name - Trojan.Downloader
Type - Registry Key
Risk Level - High
Infection - HKEY_USERS\S-1-5-21-2761955172-2059558153-1537524497-1006\Software\Classes\CLSID\{89b3ae4d-399c-4df9-b36a-ffa91f6c99ea}\InProcServer32
 
Hi,

Save text below as fix.reg on Notepad (save it as all files (*.*)) on the Desktop.

Code: 
REGEDIT4

[-HKEY_USERS\S-1-5-21-2761955172-2059558153-1537524497-1006\Software\Classes\CLSID\{89b3ae4d-399c-4df9-b36a-ffa91f6c99ea}]

It should look like this ->
reg.gif


Doubleclick fix.reg, press Yes and ok.

That should remove the key.
 
Since this issue appears to be resolved ... this Topic has been closed. Glad I could help. :)

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.
 
You must log in or register to reply here.
Back
Top