Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: Win32.Softomate recreates itself in the registry after deletion

  1. #1
    oxford Guest

    Default Win32.Softomate recreates itself in the registry after deletion

    Hello,

    ZA detects this Win32.Softomate


    http://smartdefense.zonelabs.com/tmp...791975748-1042


    and assuming whenever i am connected to the internet this trojan comes back after deletion in the registry.

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\Discardable\PostSetup\Component Categories\{00021492-0000-0000-C000-000000000046}.

    i downloaded a font program which may be the source of my problems from here: http://slil.ru/22521899

    which was linked from here: http://www.hagioteam.be/2006/08/25/700-cool-fonts/

    i'm not sure if loading this page "http://slil.ru/22521899"
    caused the problem or if downloading the prog caused it either.

    What is weird is that TrojanHunter doesn't pick up the trojan but ZoneAlarm DOES.

    Note: My download speeds drops to a crawl and sometimes eventually disconnects.


    I've already ran these scans Panda, TrendMicro, Ewido, AVG , Spybot s&d
    Lavasoft se, Trojan hunter, Spyware blaster, F-secure, Bitdefender, xclean_micro

    regards,
    rob


    Operating System: Windows XP Home Edition
    Product Name: ZoneAlarm Anti-Spyware
    Software Version: 6.5


    UPDATE: go here:

    http://forum.emsisoft.com/Default.aspx?g=posts&t=1362

    then here:

    http://uk.mcafee.com/virusInfo/defau...irus_k=133946\

    Message Edited by oxford on 09-08-2006 08:02 AM

  2. #2
    escalader Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    Yes, Hi I'm new here as well. Just went through same problem with a regisrty renewing Trojan called MACCESS.

    I have Spysweeper 5.0 which found it and quarenteened it, but next day it was back. The advice was don't turn off your machine or hibernate or restart till problem resolved!

    Then after they fixed spysweeper, 1-2 days the trick is update and run 3 back to back scans in safe mode. See if you can get 5.0 on trial and run it it has excellent track record.

    Costs $30 or so.

    Good luck

  3. #3
    oxford Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    totally forgot about spysweeper, thanks for reminding me,

    but wait, after you run 3 back to back to back scans in safe mode [5.0 is still a trial version] am i correct in assuming that it won't let you remove it anything unless you pay for it?

    I heard spysweeper 5.0 was made for sp2 and/or Vista, i'm operating on sp1. Does version 4.5 take up less ram than 5.0? so that there's no resource lockups?

    Message Edited by oxford on 09-03-2006 05:37 PM

  4. #4
    tasman Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    oxford, I picked up the exact same thing when I did a spyware scan, it was put into quarantine and I went in and deleted it and it has not returned .Tasman

  5. #5
    oxford Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    Quote: "I picked up the exact same thing when I did a spyware scan, it was put into quarantine and I *went in* and deleted it and it has not returned ."

    Now.. where did you *go in* and delete it?

    I sorely need this information. :O

    Oh and did you figure out 'how' you originally contracted this trojan?

    Message Edited by oxford on 09-03-2006 05:49 PM

  6. #6
    tasman Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    I am using ZA pro, don't know if it is the same place for you , went to ant-spyware under the quarantine tab . It give the option to delete , restore, ect . I have no idea how I got it Tasman

    Message Edited by tasman on 09-03-2006 04:50 PM

  7. #7
    oxford Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    so directly after quaranting you went under the 'quarantine' tab and just clicked 'delete'?

  8. #8
    tasman Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    Yes, that did it for me Tasman

  9. #9
    oxford Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    did you figure how you originally got the trojan?

  10. #10
    tasman Guest

    Default Re: Win32.Softomate recreates itself in the registry after deletion

    I have no idea how I got it , did a scan on Thursday and did one on Saturday and there it was. I did not download anything but did some surfing on the net. Did you get rid of it ?Tasman

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •