Should i remove these files,registry data and keys? im not sure if some are needed
Files Infected:
C:\WINDOWS\Setup_ver1.1765.0.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\Temp\sfsrv.exe (Trojan.FakeAlert) -> No action taken.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (55277-OEM-0050925-00330) -> No action taken.
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> No action taken.
Related posts:
6 responses so far ↓
1 OmegaRidley // Sep 30, 2008
That depends, some Registry keys are important! The 2nd one(sfsrv.exe) should be safe to delete, as for the registry keys, its not safe to remove them!
2 endingexodus // Sep 30, 2008
Both files are fine to delete, but be careful with the registry keys, where are you getting the info that the reg keys are bad?
3 Corey // Sep 30, 2008
It’s kind of hard to answer that question without actually examining your system. My inital response is yes you can remove it.
HOWEVER, I would very, very strongly recommend running virus scans on your computer. It looks like you are infected with something. I personally recommend Avast and do a boot scan (option when you first load it). You can get Avast from download.com and just get the free version. The reason I recommend doing this before deleting the keys is in case your System32 files are infected, unfortunately some systems are so badly infected that it’s actually the viruses that are preventing the system from crashing (seen it a few times). Run a virus scan, spyware/malware scan and see what happens. If it comes and clean and those values are still there, delete them.
4 Karl // Sep 30, 2008
I assume these are scan results from an anti-virus/spyware program?
If this scan was done by a trustworthy program,
delete those entries/files, or at least quarintine them.
5 Don // Sep 30, 2008
go into safemode by rebooting and tapping the F8 key at same time then choose safemode with networking open your browser and go to safety.live.com this is microsofts safety scanner choose protection scan be patient as this is a large download when finished try the other scans offered…you can also use Housecall.TrendMicro.com or Sophos.com or F-Secure.com
6 Y.Pestis // Sep 30, 2008
What anti-virus or anti-spyware produced the above hits?
Almost all anti-virus and anti-spyware applications have a option
to quarantine detected malware files rather than straight deleting them.
This is almost always the better choice.
In the event of a false positive,it is possible to restore the file(s).
Leave a Comment