didom

Members
  • Content Count

    27
  • Joined

  • Last visited

Everything posted by didom

  1. Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. Step #1 Please run Notepad and copy the following text into a new file: Save the file as recyclerem.bat and make sure the "Save as type" field says "All files". This is how the batch must look afterwards: Double-Click on the file recyclerem.bat, a small DOS type window should open and close immediately. Step #2 We need to make sure all hidden files are show
  2. It's safe! You have to make all the hidden files visible because some files may be hidden and then you can't delete them! when you are clean we can hide them again! Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. Step #1 Please run Notepad and copy the following text into a new file: Save the file as recyclerem.bat and make sure the "Save as type" field says "All files". This is how the batch must look af
  3. Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. Step #1 Scan again with HijackThis and check the following items: O2 - BHO: HomepageBHO - {e0103cd4-d1ce-411a-b75b-4fec072867f4} - C:\WINDOWS\system32\hp2B3B.tmp O18 - Filter: text/html - (no CLSID) - (no file) O18 - Filter: text/plain - (no CLSID) - (no file) After checking these items, close all browser windows except HijackThis and click "Fix checked".
  4. Download smitRem.exe and save the file to your desktop. Double click on the file to extract it to it's own folder on the desktop. Place a shortcut to Panda ActiveScan on your desktop. Please download the trial version of Ewido Security Suite here: http://www.ewido.net/en/download/ Please read Ewido Setup Instructions Install it, and update the definitions to the newest files. Do NOT run a scan yet. If you have not already installed Ad-Aware SE 1.06, follow these download and setup instructions, otherwise, check for updates: Ad-Aware SE Setup Don't run it yet! We need to make sure all hidden fi
  5. Please look here for a solution: http://support.microsoft.com/?kbid=296241
  6. Ok let's try this: Hello, we are going to run System File Checker, to make sure all of your protected files are not corrupt. The scan will automatically replace any corrupt files that it finds. Reboot into Safe Mode! Click Start Select Run At the prompt type sfc /scannow Please note that there is a single space between sfc and /scannow. Typing this will start the program, and a box should appear telling you how much longer the process should take. Sometimes the scan will prompt you for your Windows XP disc upon starting the scan. if this happens please make sure that you can view protected f
  7. Can you see the AWS folder in the Command Prompt?
  8. Thanks everyone! I had a great day!
  9. Can you get into the C:\Program Files\AWS-folder And then try this command: del *.*
  10. Please try this command: del C:\Program Files\AWS\*.*
  11. DELTREE C:\Program Files\AWS That should delete the whole folder ...
  12. Please try this through the command prompt: DELTREE C:\Program Files\AWS
  13. You can download en run this script: http://www.kellys-korner-xp.com/regs_edits...hiddenfiles.vbs To Enable/Disable Show Hidden Files/Folders....
  14. Step #1 Scan again with HijackThis and check the following items: O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU) O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com After checking these items, close all browser windows except HijackThis and click "Fix checked". Step #2 We need to make sure all hidden files are showing so please: Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View tab. Under the Hidden files and folders heading select Show hidden files and fold
  15. Scan again with HijackThis and check the following items: O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing) After checking these items, close all browser windows except HijackThis and click "Fix checked". Then reboot your computer and post a fresh HJT log! ----------------------------- Did you installed WeatherBug yourself? Are you able to run your computer in normal mode again?
  16. So it's on your desktop now? If it's not please download it to your desktop! Restart the computer. As soon as BIOS is loaded begin tapping the F8 key until the Advanced Options menu appears. Use the arrow keys to select the (Safe Mode with) Command Prompt menu item. Press the Enter key. Probably you will see this: C:\DOCUMENTS AND SETTINGS\SHANE DANKWORTH If not type: CD DOCUMENTS AND SETTINGS then hit enter and type: CD SHANE DANKWORT and hit enter again. Now you'll be in C:\DOCUMENTS AND SETTINGS\SHANE DANKWORTH Type: CD DESKTOP and hit enter. Type: COPY bfu.zip C:\fixwareout\SUB and hit en
  17. Please download bfu.zip (no need to unzip it!!!) and copy it to this folder C:\fixwareout\SUB Then try to run the wareoutfix again!
  18. Ok, your HijackThis log is also clean.... This log looks clean! Don't forget to re-hide all files and folders. To re-hide all files and folders: Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading deselect "Show hidden files and folders". Check the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. [*]This is a good time to set up protection against further attacks. Read the article behind this link "How did I get infected". If you don't already have them, you need an
  19. I mean the scanlog from panda, not a fresh HijackThis log...
  20. Please run the scan again and post the log....
  21. Run Panda's online virus scan and perform a full system scan: Panda ActiveScan Save the scan log and post it along with a new HijackThis Log in your next reply.
  22. Scan again with HijackThis and check the following items: After checking these items, close all browser windows except HijackThis and click "Fix checked". Make sure all hidden files and folders are visible (Instructions ) Reboot your computer into safe mode (Instructions) Find and delete these files and folders (if they are still there): C:\Program Files\Media Access <= this folder Reboot your computer back into normal mode. Your log shows that you have disabled some startup programs using MSConfig. This is not recommended because I cannot clearly see everything that is loading on your co
  23. What went wrong? Please try this: Please download miekiemoes' LQfix batch here: http://users.telenet.be/bluepatchy/miekiem...tools/LQfix.zip Unzip it to the desktop but do NOT run it yet. Next, please reboot your computer in Safe Mode by doing the following: 1) Restart your computer 2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8. 3) Instead of Windows loading as normal, a menu should appear 4) Select the first option, to run Windows in Safe Mode. For additional help in booting into Safe Mode, see the following site: http://www.pchell.com/
  24. Scan again with HijackThis and check the following items: After checking these items, close all browser windows except HijackThis and click "Fix checked". Then reboot your computer. Run Panda's online virus scan and perform a full system scan: Panda ActiveScan Save the scan log and post it along with a new HijackThis Log in your next reply.