View Single Post
Old 08-07-2007, 12:43 AM   #2 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,489
OS: N/A


Re: Constant popups and warnings with erroneous messages - Ultimate Defender 2

Go to Start > Control Panel > Add or Remove Programs and uninstall the following programs:
  • ViewPoint
Please note any other programs that you dont recognize in that list in your next response

---------------


Do a HijackThis scan & place a check next to these items and select "Fix checked":

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O21 - SSODL: wmplayer - {F66D84A6-3D6A-4D67-A3C3-AC6792FF34C2} - C:\WINDOWS\wmplayer.dll (file missing)
O21 - SSODL: wmsound - {6565D791-FE69-4AC5-B0BB-48F426E3603D} - C:\WINDOWS\wmsound.dll (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe


Ignore any prompts that calls for a reboot


---------------


Open notepad and copy/paste the text in the quotebox below into it:

Code:
Folder::
C:\VundoFix Backups
C:\Program Files\VideoAccessCodec
C:\Program Files\Viewpoint
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"wmplayer"= -
"wmsound"= -
Save this as "CFScript"




Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply.


---------------


Click here perform an online scan >> Online Scanner


---------------


In your next post, please include fresh logs from:
  1. Fresh Hijackthis log taken just before replying
  2. Online scan
  3. ComboFix's log
Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now
__________________

Question - what have you done for the community today?
sUBs is offline