Now for the second part of the fix: You should print out these instructions, or copy them to a Notepad file for reading while in Safe Mode,...
Ah, now I know what it is, tho I had to share the image with a fellow analyst. That is a replacement for the IE spinning globe which is activated...
Upload it to photobucket: http://photobucket.com/
I'd get all updated, and see if any of the files contained within those update fix the error. Now for that 'yes' box, can I get a screen shot...
Excellent news, glad to hear all is well. Now for some minor clean up and recommendations. We have 3 more things to do, to help ensure you...
I'm not 100% sure why it picks out some, which are legit or not, it could be it works off a white list, I'll have to ask around some. That is why...
Ok, I'm not seeing anything in your log file to indicate a problem. I would say it's a pretty safe bet that the HP software corrupted your...
OK, just a couple of minor items to fix, how is the machine running now? Please let me know of any unwatned symptoms. Please go to Add/Remove,...
Hi Delboy. Aside from the hosts entries, I don't see anything else in the log file. What is it that makes you feel you have problems? Firefox...
Well well, busy busy I see. :p We need to rid the rk first with GMER and HJT. Open GMER Select the Services tab Find the service called...
Very simple really, the registry reflects what is on the machine, but if something is removed from the machine, the registry will not always...
Hi BigBadRadDad. This is one of the many SmithFraud\Zlob infections. Please follow directions for the first part of the fix. Please download...
So it just says 'documents and settings' and does not provide anything else? Seems a little vague to me at the very least. How is someone...
Well all is good except this one folder does not want to go away: C:\Program Files\WindowsUpdate<<<<---this one Manually delete this one if...
Ok, now that we know all the files are gone, we need to clean out your registry. But lets first back up your registry. Click the 'Start'...
OK, with a rootkit present we must address that first and foremost. Download GMER from here Right Click the Zip and Select "Extract All "...
Ok, lets fix up with HJT and we ought to be done. Run Hijackthis and look over the following entries I have listed, check the boxes next to...
OK lets run Killbox again, using the same directions as I gave previously with the following files: C:\Program Files\BraveSentry C:\Program...
Ahhhhh....my bad, should have asked for new ComboFix and HJT logfile please. We need to verify things are gone
Very good, lets remove whats been found. 1) Please download the Killbox. Save it to the desktop and run it. 2) Select "Delete on Reboot ",...
Separate names with a comma.
