You're probably good to go, but if it would make you feel better, run an online scan with Panda ActiveScan or Kaspersky Online Scanner. Certainly...
Scan again with HijackThis, place a check next to the following entries, close all other windows and click Fix Checked. R1 -...
Delete the following folders/files. All SmitfraudFix files/folders/logs C:\Deckard C:\fixwareout C:\WINDOWS\system32\Process.exe Copy the...
Go ahead and continue on with the rest. Fix this entry with HijackThis too. O4 - HKLM\..\Run: [QuickTime Task] "C:\Program...
Your friend can post the log here. We can walk him through it. :)
You're using Version 2.02 of HijackThis, which shows run entries for other user accounts on your computer. You will notice 3 other ctfmon entries...
Quite a list to do. Please do everything as instructed, and in the order given. In normal mode, go to Add/Remove Programs, look for any of...
You have to open My Computer, right click on the C: drive and select Properties. There you will find the Tools tab.
Hi Rackster :) Easily enough removed, but I do recommend your friend post a HijackThis log from the computer so that it can be analyzed...
What I'd like to do is see if we can get things whacked down good enough that you can get online with that machine long enough to download some...
Great! :) Hang in there ....... have to run an errand and will be back in a bit. ;)
Hi sean, That entry is related to what AVG AntiSpyware identifies as Adware.Softomate...
Go ahead and close Deckards for now. Run a scan with HijackThis and save the log, then post it here.
Due to some problems, ComboFix was pulled, for now. We'll use some other methods instead. Note: You must be logged onto an account with...
Download HijackThis from the following link and save it to the flash drive (it will appear in My Computer when inserted)....
Have you got a way to transfer the required files between computers?
Welcome to WindowsBBS Encorepilot :) Note: You must be logged onto an account with administrator privileges to complete the following....
That statement suggests that you still have one of the original RAM modules installed. I was under the impression, based on your comments in this...
Glad to hear things are working again. I wouldn't bother chasing after those mof files anymore at this point. ;)
Looks to be in order. Please zip the C:\Qoobox folder, then upload the zip to my submission channel. Leave a link back to this topic. Delete...
Separate names with a comma.