Since you've removed Bit Torrent (insert applause), remove both of those values from the authorized applications list. I'm investigating the...
Look under both the current_user\software and local_machine\software hives for the following keys and delete if present. fengzi hebe I...
ctfmon.exe is a legitimate file, and I'd expected that it had been overwritten with CTFMON.EXE, not that there would be 2 The CTFMON.EXE is...
Scan again with HijackThis (may need to run as admin or with UAC off) and place a check next to the following entry, then click Fix Checked. O4...
Right click the hosts file and select properties. See if the 'read only' attribute is set and remove it if it is, then try editing again. If still...
You should not have been advised to turn UAC off, and Norton should be scolded for doing so. UAC, while it can bbe a PITA, is your best defense...
In the State of Michigan No man may seduce and corrupt an unmarried girl, or else he risks five years in prison. A woman isn't allowed to...
Hi tez :) Please upload the following files to my submission channel. Leave a link back to this topic. C:\Windows\2.exe...
Grab an updated copy of ComboFix. Download ComboFix by sUBs from here or here, saving the file to your desktop. Close all open programs and...
Right click the ResetProtocolDefaults.reg link below and select Save Target As, then save the file to your desktop....
I'd recommend you uninstall the Yahoo, Kaboodle and My Points Toolbars then disable TeaTimer and reboot. After reboot, fix the following entries...
Glad I could help, John. You're most welcome. :)
This is what shows as infected, in addition to system restore points. If you followed my last set of instructions AFTER running the scan, or late...
Yes
Post a fresh HijackThis log.
First, delete the copy of VundoFix.exe you currently have and download a fresh one. Then delete the file C:\VundoFix.txt Delete the following...
Thanks WhitPhil ....... I've used ren at least a thousand times in my batches yet failed to realize I posted the command errantly. :o
Glad to hear that! :) Here's what still needs to go, if you haven't already taken care of them. C:\WINDOWS\xpupdate.exe.ren...
Open the Control Panel then Internet Options. On the Programs tab, click Reset Web Settings. Allow the homepage to be reset as well.
Looks good. Remove the following. dss.exe SDFix.exe VundoFix.exe C:\Deckard C:\SDFix C:\VundoFix Backups Please do an online scan...
Separate names with a comma.
