Haxfix Version 5.0.32

Version 5.0.32
2008 10 31

Infection Goldun.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\mdhash]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mdhsh]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mdhsh.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mdhsh.sys]

Files:
system32\mdhash.dll
system32\mdhsh.sys


Use haxfix to remove this infection.
Removalinstructions for this infection, you can find here or here.