Search the Community
Showing results for tags 'hku'.
So i have that annoying hku goes back and back. I tried deleting it manually without mbam scans first,then, (i cant delete it even with regdellnull) it deleted my computer cant open anything, so i force shut down laptop. user got deleted and created another user without admin rights and cant open task manager. my laptop would be doomed if not for mbam but it is still there and always comes back. help in deleting that *****.? i also got those annoying pop-up shortcuts that always comes back image is shown below. Addition.txt FRST.txt hku disable registry and task manager appeared after restart and scan while i was trying to manually delete the hku 1-5-21.txt pop up shortcuts.docx
I really need help getting rid of a pesky virus, HKU\S-1-5-21 I scan my computer and it's there. I get rid of it, and a few days later, it comes right back! I don't know how to completely exterminate this thing! I'm sure its causing me the problems I've been having with my PC. I'm using a Student account, and yet some programs ask me to give permission to run with the little admin shield symbol. Also, my Mozilla Firefox bookmarks, history, ect. will sometimes stop working, and that red bar will appear at the top of Firefox telling me it can't access my bookmarks because they're being accessed elsewhere. Also, the Malwarebytes taskbar logo disappears when my computer's acting up like this, and I click to open Malwarebytes and it doesn't open. I then go to the Program files of Malwarebytes and it tells me I don't have access. It also tells me I don't have access when I try to uninstall MBAM. *Note: A bit (a few weeks) after I logged into the Admin account on my PC and changed a registry file to make a game that wasn't working on my PC work, and I updated my PC, this all started. I don't know if there's any correlation between the two events, but my computer was fine up until that point. I changed: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\ SharedSection=1024,3072,512. Change 3072 into 4096 so it reads: SharedSection=1024,4096,512 Here's the scan log for the virus: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/16/17 Scan Time: 11:39 AM Log File: af1cae6c-e27f-11e7-908c-e4115bfc336f.json Administrator: Yes -Software Information- Version: 126.96.36.1993 Components Version: 1.0.262 Update Package Version: 1.0.3501 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Student -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 243651 Threats Detected: 1 Threats Quarantined: 1 Time Elapsed: 45 min, 6 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 1 PUM.Optional.DisableMCProperties, HKU\S-1-5-21-3769206596-2729350310-207999698-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER|NOPROPERTIESMYCOMPUTER, Replace-on-Reboot, , ,1.0.3501 Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) (end)