ASPack file??

  • Thread starter Thread starter ppiper
  • Start date Start date
P

ppiper

Trojan Hunter Reports Possible Trojan C:\windows\system32\aprjpa.exe
it loads through registry and i cant figure out how to remove it. I
did registry search and delted all the value for it. Deleted the file
in safe mode. but it keeps reinstalling at boot. spysweeper says
winsync trying to load which when referenced is aprjpa.exe
Any one know about this file, and how to get rid of files that load
from ASPack packed files.
thanks
ppiper
 
ppiper said:
Trojan Hunter Reports Possible Trojan C:\windows\system32\aprjpa.exe
it loads through registry and i cant figure out how to remove it. I
did registry search and delted all the value for it. Deleted the file
in safe mode. but it keeps reinstalling at boot.
Click to expand...

Turn off system restore, reboot, then turn it back on again.

spysweeper says
 
ppiper said:
Trojan Hunter Reports Possible Trojan C:\windows\system32\aprjpa.exe
it loads through registry and i cant figure out how to remove it. I
did registry search and delted all the value for it. Deleted the file
in safe mode. but it keeps reinstalling at boot.
Click to expand...

did you also delete the registry entry from safe mode?

my guess is that there is some other program is recreating it - filemon
(with appropriate filters) from http://www.sysinternals.com may be able
to tell you which program that happens to be...
 
Back
Top