Windows Registration

cobrajet431 · Jun 12, 2006

Hi guys. My Zone Alarm just asked for permission to allow Windows Registration to access the internet. Said the file was SUCATREG.EXE (in caps). ZA details were skimpy. I googled it and only found a couple of relevant links, but they were for windows XP, and I have ME. I've had this PC for several months and was never asked this one before. I denied permission. Any info would be appreciated. Thanks.

chaslang · Jun 12, 2006

Sounds like this: http://www.sophos.com/virusinfo/analyses/w32magistra.html

This can be a serious problem if you really have this infection. Here is a small quote from the above link:

W32/Magistr-A is a polymorphic Windows 32 executable file virus which spreads by infecting files and via email. Magistr includes highly destructive code which - if triggered - can delete all files from local and network drives, wipe the CMOS settings, and flash the BIOS chip of your computer.
The virus searches the user's address book, mailboxes and other files present on the computer for email addresses. The virus specifically targets addresses from Outlook Express, Netscape Navigator and Internet Mail and News. It then sends itself to these email addresses using its own SMTP client.
Click to expand...

You should follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

Bitdefender

Panda Scan

HijackThis

.

cobrajet431 · Jun 12, 2006

Chaslang...I don't really think your post applies to me. I wasn't infected, as ZA questioned the action, and I said "deny." So there's no need for an HJT log. I just wondered if there would have been any harm.

chaslang · Jun 13, 2006

cobrajet431 said:

Chaslang...I don't really think your post applies to me. I wasn't infected, as ZA questioned the action, and I said "deny." So there's no need for an HJT log. I just wondered if there would have been any harm.
Click to expand...

That's not really true. If ZoneAlarm found the process trying to do something on your PC and to get access to the internet, there could be other things still present. Just blocking the process from having internet access does not remove it from your PC. Nor does it stop it from running.

cobrajet431 · Jun 13, 2006

Thanks chas, I see your point. I have AVG, Ad-Aware SE, Spybot S&D, Superantispyware, and a-squared; all of which I update and run regularly. Right now I'm gonna run 'CleanUp4.5.1', update my protectors, and run my scans in safe mode. If there's a problem I'll be back. Thanks for the wake-up. Guess I wasn't thinking!

chaslang · Jun 13, 2006

Okay! But if you still have any problems, you will need to complete the procedure given in message number 2.

Log in or Sign up

Windows Registration

cobrajet431 Private First Class

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

cobrajet431 Private First Class

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

cobrajet431 Private First Class

chaslang MajorGeeks Admin - Master Malware Expert Staff Member