set it on fire :devil:
Printable View
set it on fire :devil:
I have. Manually deleted them from the registry.
There were 6 separate entries altogether, removed them all. Searched again and they were gone.
When I disconnect from our network, remove the infected files and reboot, everything is fine, but as soon as I reconnect the network, it installs itself again. That's why I think it's on the server.
It might be on the server, yes. But it does more than create files in the registry. It leaves files in your System area, t edits registry entries to lower security settings, it edits registry entries to change internet settings, it ends many processes (including most AVs etc.), it stops drivers from loading and more.
Thanks for the help James. :thumbsup:
Gotta go. If you think of something, please let me know.