Re: Need help removing Backdoor.ProRat virus

Mitch_at_this_is_not_a_real_address.com
Date: 06/03/05


Date: Fri, 03 Jun 2005 00:16:25 GMT

I get the same effect. The DOS box flashes for a fraction of a
second, and the report is empty.

Here's something else. When I run Ad-Aware, it finds Backdoor.ProRat,
several instances, and it gives the affected registry keys.

These keys match those that Symantec says to check in
(http://securityresponse.symantec.com/avcenter/venc/data/backdoor.prorat.html).

So Ad-Aware sees these registry keys. But if I go into Regedit,
whether Safe or Normal mode, Administrator or not, none of those keys
are there!



Relevant Pages

  • Re: Opening html file etc.
    ... Eustace wrote: ... When I click at a local html file I get an alert like: ... I run Ad-aware and it found 2 registry keys and 1 registry value ...
    (microsoft.public.windowsxp.general)
  • Opening html file etc.
    ... When I click at a local html file I get an alert like: ... Windows cannot find 'C:\my files\webpage.html'. ... Since the 2 problems appeared at about the same time, I tend to think they are connected, and may also connected with the registry keys, since it's very rare that Ad-Aware find anything else then cookies. ...
    (microsoft.public.windowsxp.general)
  • Hijackers and registry keys
    ... We have AVG free ... version and we have Ad-Aware. ... registry keys. ... We put it in Quarantine to make sure that ...
    (microsoft.public.security)
  • Re: Need help removing Backdoor.ProRat virus
    ... and the report is empty. ... When I run Ad-Aware, it finds Backdoor.ProRat, ... and it gives the affected registry keys. ...
    (microsoft.public.security.virus)
  • Re: Help!!! I get "Access Denied" message .........
    ... > Your caution to unknown freeware is very healthy, ... It was written by a Microsoft MVP, ... > You'll need to check permissions on various files and registry keys, ... > mentioned and look for ACCDENIED errors: report back and we'll help you dig ...
    (microsoft.public.windowsxp.security_admin)