This will take a few steps. Start with the following. Prepare CWShredder: Download the stand-alone CWShredder 2.0 from here. Save it to the...
Welcome to WindowsBBS JMiss1983:) EDIT: Lonny posted while I was working up a reply, so after completing his instructions, you can fix whatever...
Welcome to WindowsBBS spritesuzi :) Download "Registry Search Tool" (RegSrch.vbs) from here http://www.billsway.com/vbspage/ start it and...
You bet. ;)
Close any programs you have open since this step requires a reboot. From the l2mfix folder on your desktop, double click l2mfix.bat and select...
This is the only baddie I see. O4 - Startup: PowerReg Scheduler.exe Fix that entry with HJT and reboot. Search the drive for and delete all...
Welcome to WindowsBBS buku :) Lets start with the Look2Me infection. Please download L2mfix from one of these two locations:...
There's a tool for this particular peice of scumware now. Prepare CWShredder: Download the stand-alone CWShredder 2.0 from here. Save it to...
Lets play it safe and do the usual steps for removing this, since some of the entries re-appeared and files were not found. Download Pocket...
Scan again and fix the following. O4 - HKLM\..\Run: [WrcjS] C:\documents and settings\tom\local settings\temp\WrcjS.exe O4 - HKLM\..\Run:...
Welcome to WindowsBBS chetonbbs:) This is actually the first time I have seen the bad guy present in a HJT log, so will save you a few steps (I...
Scan again with HijackThis and place a check next to the following remaining entries. Close ALL other windows and click fix. O4 - HKLM\..\Run:...
Looks good. :)
Download CWShredder 2.0 from here. Save it to the desktop. Double click to install. Open CWShredder from the new shortcut on the desktop, close...
I've attached a new zip file. Merge it and reboot, then post another new.bat log.
Necessary, no. Recommended, yes. ;)
Open the Java Plug-in in the control panel, cache tab and click clear. Then update your Sun Java. Current is JRE 1.4.2_07
Welcome to WindowsBBS Branleo :) You have a nasty new virus that infects explorer.exe, and currently there is only one known way to properly...
Welcome to WindowsBBS Dave :) Download Process Explorer, unzip and open and start procexp.exe to run. Click view>lower pane view>dlls, click...
Log looks clean, however, I still don't see your AV in running processes. You may need to uninstall/re-install it. Please post another log from...
Separate names with a comma.