Member Panel

Thats not good , lets remove it.

Boot in safemode and fix this one with hjt and delete the file in bold.

O4 - HKCU\..\Run: [aupd] C:\WINDOWS\System32\symsvcsa.exe

Wierd though , both panda and ewido rocoqnize it as malware but they didn't remove it.


Let me know if you still have any problems after that.

Ok, I fixed that file. ZoneAlarm was informing me that symsvcsa.exe and winlogon.exe tryed to connect to the internet and send emails (maybe spam), I denied them in ZA though. :undecided

That was before removing it i asume?

Do you still have any problems atm? And also have you updated windows?

Yeah, after removal. No problems currently, and windows is up to date.

If it was AFTER removing that file then something went wrong and it is still there i think. It cant try to connect to the net when its gone.

You might want to post a new hjt log to check.

Whoops, lol, I meant before it was removed.

LOL , small difference. :cheesy:

I'll mark this as fixed then.