Jump to content

Yet another trojan query (sorry bout this)


Guest Dan
 Share

Recommended Posts

Ok boss, I'm back again.

I've had a look in the registry and found what looks like it might be the culprit:

Searching for phoenixsecuretechnet brings up a blank, but searching for just phoenix brings up two items one of which is a *.scr which was a dubious file I thought I'd deleted sometime back along with a reference to phoenix. The placing is HKEY Current user\software\microsoft\searchassistant\ACMru\5603 and the file type refered to is Reg SZ.

The thing is I don't know what I do about it. I mean in the old autoexec bat file days I'd just stick a rem in front of it. How do you disable something in the registry?

Cheers for any help (and once this is nailed down I really will shut up) :(

Link to comment
Share on other sites

Export the registry to your desktop, set a restore point, then in the right hand pane r/click on the reference to phoenix only, delete it then shutdown regedit and reboot it should then be gone.

But I think this may only be a reference to the search you have carried out in the past.

delete the .scr in safe mode, but don't empty the recycle bin until we know for sure it isn't going to cause problems

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. Privacy Policy