From 2 separate sources ........
Looks much better, but I'm now seeing signs of yet another infection that affects legitimate files. Please download FindAWF Save the file to...
Scan again with HijackThis and place a check next to all of the O15 - Trusted Zone entries, then click Fix Checked. Close HijackThis....
Open My Computer and click Tools>Folder Options on the menu. Select the View tab, then deselect the box for 'Hide extensions for known file types'...
You'll need to do this in safe mode, so save these instructions to text. Reboot to safe mode by tapping F8 when your computer restarts, then...
I can maybe point you in the right direction :rolleyes: Start the computer in command prompt only mode. At the c: prompt, type edit...
Wow. Please paste the following command into a command window then hit enter. dir "C:\Documents and Settings\Mom\My Documents\My Music\Joe...
The only infected things found in that scan are: items in quarantine by Norton, which can be removed; infected System Restore points, which can be...
Lets try another application. Download MoveOnBoot and install it. Run it and select Delete Actions>Delete Folder(s). Another window will open....
Welcome to WindowsBBS jason0902 :) Your suspicions are correct. Several actives infections that I can see. :( Download ComboFix by sUBs from...
TeaTimer will need to be disabled for HijackThis to work. Open Spybot Search & Destroy. In the Mode menu click "Advanced mode" if not already...
Click Start>Run and type cmd then hit enter to open a command window. Highlight and copy the following bolded command then right click in the...
Scan again with HijackThis and place a check next to the following entry, close all other windows then click Fix Checked. R3 - URLSearchHook:...
Yes, the folder is still there but the 'Other Deletions' section of the log shows that the files have been deleted. Can you access the folder now?...
I have not seen the instructions given by Salvation in regards to imaging a partition on a drive with a current operating system already in place...
IrfanView is an easy to use converter capable of doing batches. Added bonus ..... it's free. :)
Thank you. Now please complete the CFScript instructions in my last post, then post the new ComboFix log and a fresh HijackThis log.
Without having done any researching whatsoever on that message (and not being familiar with it either :rolleyes: ), my recommendation would be to...
Looking good. Scan again with HijackThis and place a check next to the following entries, close all other windows then click Fix Checked. R1 -...
Good job! :) Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;...
Separate names with a comma.
