ASPack file??

[ppiper]

Trojan Hunter Reports Possible Trojan C:\windows\system32\aprjpa.exe
it loads through registry and i cant figure out how to remove it. I
did registry search and delted all the value for it. Deleted the file
in safe mode. but it keeps reinstalling at boot. spysweeper says
winsync trying to load which when referenced is aprjpa.exe
Any one know about this file, and how to get rid of files that load
from ASPack packed files.
thanks
ppiper

 

[Poster 60]

Trojan Hunter Reports Possible Trojan C:\windows\system32\aprjpa.exe
it loads through registry and i cant figure out how to remove it. I
did registry search and delted all the value for it. Deleted the file
in safe mode. but it keeps reinstalling at boot.

Turn off system restore, reboot, then turn it back on again.

spysweeper says

 

[Shane]

Turn off system restore, reboot, then turn it back on again.

Wrong.



Shane

 

[Data Recovery Expert]

If you want to learn about Partition, Hard Disks, File systems and Data
Recovery, Book "Data Recovery with & without Programming"

You can see the contents of the book on following Link:



http://www.DataDoctor.biz/author.htm



Regards

TT

 

[kurt wismer]

Trojan Hunter Reports Possible Trojan C:\windows\system32\aprjpa.exe
it loads through registry and i cant figure out how to remove it. I
did registry search and delted all the value for it. Deleted the file
in safe mode. but it keeps reinstalling at boot.

did you also delete the registry entry from safe mode?

my guess is that there is some other program is recreating it - filemon
(with appropriate filters) from http://www.sysinternals.com may be able
to tell you which program that happens to be...