PDA

View Full Version : How do I get rid of a trojan horse that is re-edited my registry


bigbrit75
Feb 4, 2010, 07:09 AM
I have a virus that is disguising itself as windows programs like winlogon.exe and csrss.exe, when I check the properties folder, there is another account holder with full permissions called trusted installer. Taken over control of Microsoft security essentials too.

Curlyben
Feb 4, 2010, 07:10 AM
Back up and rebuild, only real option.

seahwk83
Feb 4, 2010, 09:46 PM
Delete that account in user accounts in control panel

Then download and run malwarebytes and let it update itself and run full scan

Malwarebytes.org (http://www.malwarebytes.org/)

Let it remove whatever it finds and post back if still issues with files you mentioned above with as much info with any issues may be having