[RobinHood]

Hi...Im new to this forum so let me introduce myself...Im a computer tech from South Africa and have been been building and repairing computers since 1989...I have one question though...I received a computer with dload.exe and mmdmm.exe ( malware ). I managed to delete all the viruses, but somehow the computer keeps downloading NEW spyware...I think it could be a registry entry as there is realy NOTHING starting up that i can locate that is NOT legit...Anyone here knows of where in ther registry this "setting" could have been written, and how to delete it??
I have tried regmon, filemon and curports....all monitoring programs, but the closest i could get was "process.exe" that was used to download the spyware....Now i was thinking...Is there a program that can detect WHICH programs uses "services.exe"?

..tia

[Bobby]

hello and welcome
please download hijackthis and post your log here.
_________________
I reccomend spyware doctor and malware bytes as ultimate protection.

[RobinHood]

Hi Bobby...At the end i had to format the drive
Talking about HijackThis...I used it, but even THERE i could find nothing of interrest...thats why i was thinking it mustve been some type of registry entry in the CLSID

Thanks for trying to help anyways

[Bobby]

hello
well there's nothing to thank for hopefully there's nothing left on you computer right now.
_________________
I reccomend spyware doctor and malware bytes as ultimate protection.