Registry Virus Help

Registry Virus Help
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Registry Virus Help =?Utf-8?B?bWFya2I=?= 01-28-2008
---> Re: Registry Virus Help Volodymyr Shche...01-28-2008
Posted by =?Utf-8?B?bWFya2I=?= on January 28, 2008, 12:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

Recently a computer running Windows 2000 SP4 was infected with a worm. It
claimed to be the netsky32. I used the Malicious Software Removal Tool to
remove it. I need to find out when this system was infected. This particular
worm causes IE to launch and contact a website. So I was thinking of a tool
that will pull up a log and help me to interpret the results. I know the day
the infection occured, just not the time. The RegMon tool is great, but shows
real-time and I need to look back through the log to 14 days ago.

Please assist.
--
Markb


Posted by David H. Lipman on January 28, 2008, 4:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

|
| Recently a computer running Windows 2000 SP4 was infected with a worm. It
| claimed to be the netsky32. I used the Malicious Software Removal Tool to
| remove it. I need to find out when this system was infected. This particular
| worm causes IE to launch and contact a website. So I was thinking of a tool
| that will pull up a log and help me to interpret the results. I know the day
| the infection occured, just not the time. The RegMon tool is great, but shows
| real-time and I need to look back through the log to 14 days ago.
|
| Please assist.

There is no real way to assay WHEN a PC was infected. Sorry.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by Volodymyr Shcherbyna on January 28, 2008, 4:29 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Before removing the executable file, you should took a look at creation date
of a file.

--
V.
This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> Recently a computer running Windows 2000 SP4 was infected with a worm. It
> claimed to be the netsky32. I used the Malicious Software Removal Tool to
> remove it. I need to find out when this system was infected. This
> particular
> worm causes IE to launch and contact a website. So I was thinking of a
> tool
> that will pull up a log and help me to interpret the results. I know the
> day
> the infection occured, just not the time. The RegMon tool is great, but
> shows
> real-time and I need to look back through the log to 14 days ago.
>
> Please assist.
> --
> Markb
>



Posted by David H. Lipman on January 28, 2008, 4:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Before removing the executable file, you should took a look at creation date
| of a file.
|

Creation dates of malware files are often faked.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by Volodymyr Shcherbyna on January 28, 2008, 4:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Believe me, there is a low percentage of malware who modifies own create
date.

--
V.
This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> | Before removing the executable file, you should took a look at creation
> date
> | of a file.
> |
>
> Creation dates of malware files are often faked.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>



Similar ThreadsPosted
Virus Adds Registry Entrys February 16, 2007, 11:46 am
Second Try: Any Anti Virus Applications That Do Not Require Install to Registry? July 4, 2008, 6:56 pm
Re: virus diables registry, task manager, run button, and more...help removal September 27, 2005, 8:23 am
virus diables registry, task manager, run button, and more...help removal September 27, 2005, 7:33 am
Registry Adware? April 1, 2006, 11:47 am
Run Registry Entries? November 21, 2006, 12:21 pm
REGISTRY CLEAN POP UPS February 5, 2007, 12:29 pm
Pop Up Registry Error Message November 9, 2005, 7:38 pm
how to recover registry damage April 6, 2008, 5:57 pm
Where to locate Registry files? June 4, 2008, 1:50 pm

The site map in XML format XML site map

Contact Us | Privacy Policy