[Excore]

Hello.

I've identified that I've been infected with the win32.neshta virus. It runs every time an executable opens.

http://www.microsoft.com/security/portal...2FNeshta.A

How would I go about removing this?

[Simkecg]

Can you post SS of you processes in Task Manager, i will help you

[Excore]

Code

exeHelper by Raktor
Build 20100414
Run at 17:21:35 on 09/08/12
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

---

Can you post SS of you processes in Task Manager, i will help you

https://puu.sh/13h3U
https://puu.sh/13h4v

[Excore]

Im running a Kaspersky Pure scan. It's scanning and also disinfecting all the files that the Virus infected.

[Excore]

Hi, do you still want assistance, or has your issue been resolved?

I did a system restore from a few weeks ago, and everything seems to be fine. I'll notify you if the problem continues.

[#Skyline]

if its coming back on startup Follow These Steps START>Type in "msconfig" In Search>Go Startup> and Untick the box which is win32

if that didnt work try find the file on your PC and end it in processes or maybe system restore

[Excore]

It really isn't advised to do a system restore, but all right.

Can you explain why?

if its coming back on startup Follow These Steps START>Type in "msconfig" In Search>Go Startup> and Untick the box which is win32

if that didnt work try find the file on your PC and end it in processes or maybe system restore

Its a system service, and I cant find it. I can delete the files all I want, but the service keeps dropping them again.

[Excore]

Malware can easily hide in your restore points.

Ah, didn't know that. Thanks for the information, although I did research on the virus and it was not shown that this virus does that. It doesn't seem to be coming back so I think I'm okay. I'll keep my eyes open though,