anykuy.com virus

[bretttf]

any fixes????

[hellnoire]

Try booting from the Windows disk and doing a repair, then scan with the following:

Spybot S&D, Malware Bytes, followed by a scan with your antivirus. Failing that, a log from either HijackThis or WinPatrol would help us if they don't remove everything.

[YuMeng]

Hello bretttf try finding here
http://www.bleepingcomputer.com/forums/topic202584.html
maybe they got solution

[Ceyfer √]

I'm not familiar with the malware~

http://www.malwarebytes.org/forums/index.php?showtopic=11632&mode=threaded

http://forum.kaspersky.com/index.php?showtopic=105610&st=0&p=896069&#entry896069

---

Hope to see some malware analysis ~ but this one is part of rogueware payload

check this just recently been detected by MBAM feb 14 2008 update

Rogue.MSantispyware2009 **

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\CrucialSoft Ltd (Rogue.MSantispyware2009) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\userinit.exe -> Quarantined and deleted successfully.

Folders Infected:
C:\Documents and Settings\All Users\Application Data\CrucialSoft Ltd (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009 (Rogue.Multiple) -> Quarantined and deleted successfully.

Files Infected:
C:\Documents and Settings\Veronica\Local Settings\Temporary Internet Files\Content.IE5\SDCRVEWO\promo[1].exe (Trojan.Agent) -> Quarantined and deleted successfully.

[Raymond]

Try scanning your computer with:

1. Malwarebytes's Anti-Malware
2. SUPERAntiSpyware
3. SpyBot