ironbrigade Posted January 24, 2009 ID:50560 Share Posted January 24, 2009 I need to know if it is safe to delete these infected key registries and files. If someone could tell me it would be a great help.Registry Keys Infected:HKEY_CLASSES_ROOT\main.bho (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\TypeLib\{8e3c68cd-f500-4a2a-8cb9-132bb38c3573} (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\Interface\{986a8ac1-ab4d-4f41-9068-4b01c0197867} (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{afd4ad01-58c1-47db-a404-fbe00a6c5486} (Trojan.BHO) -> No action taken.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{afd4ad01-58c1-47db-a404-fbe00a6c5486} (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\main.bho.1 (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\AppID\{a0e1054b-01ee-4d57-a059-4d99f339709f} (Trojan.BHO) -> No action taken.Registry Values Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\lxpinit_dlls (Spyware.Agent.H) -> No action taken.Registry Data Items Infected:(No malicious items detected)Folders Infected:C:\Program Files\Microsoft Common (Trojan.Agent) -> No action taken.Files Infected:C:\WINDOWS\SYSTEM32\nvaux32.dll (Spyware.Agent.H) -> No action taken.C:\Program Files\Common\helper.dll (Trojan.BHO) -> No action taken. Link to post Share on other sites More sharing options...
Tigger93 Posted January 24, 2009 ID:50581 Share Posted January 24, 2009 Yes they are, you are indeed infected. Please remove those with Malwarebytes then post a HijackThis log here (link to download HJT can be found in the sticky topic in this forum). Link to post Share on other sites More sharing options...
Recommended Posts