View Single Post
Old 10-17-2007, 08:02 AM   #7 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,494
OS: N/A


Re: Trojans, popups galore--response time awful

Quote:
Do see a folder under C:\Program Files called Viepoint. There is another folder in it re Viewpoint Experirence Technology. May I delete these?
I'll delete these in a while

Quote:
Do not know what program "Win Touch" does. It appears in Add or Remove Programs list. Do not recognize it. Should I delete this?
The uninstaller doesn't work.

Launch HijackThis & goto Config > Misc Tools - Open Uninstall Manager
From the box on the left, select Win Touch & hit the "Delete this entry" button located on the right


------------------



Open NOTEPAD.exe and copy/paste the text in the quotebox below into it:

Code:
@echo off
if exist "%temp%\log.txt" del "%temp%\log.txt"

for %%g in (
"C:\Documents and Settings\Administrator\Application Data\Microsoft\Windows\uexifq.exe"
) do (
del /a/f/q %%g >nul 2>&1
if exist %%g echo.%%~g>>"%temp%\log.txt"
)

for %%g in (
"C:\Program Files\iTunes\bak"
"C:\Program Files\QuickTime\bak"
"C:\Program Files\Viewpoint"
'C:\Documents and Settings\All Users\Application Data\Viewpoint"
"%systemdrive%\VundoFix Backups"
%systemdrive%\Deckard
%systemdrive%\Qoobox
) do (
rd /s/q %%g >nul 2>&1
if exist %%g echo.%%~g>>"%temp%\log.txt"
)

For %%g in (
"C:\Program Files\AIM\bak\aim.exe"
"C:\Program Files\Common Files\Microsoft Shared\Works Shared\bak\WkUFind.exe"
"C:\Program Files\FilmLoop Player\bak\FilmLoop.exe"
"C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\bak\mm_tray.exe"
) do (
nircmd killprocess %%~g
move /y %%g "%%~dpg.."
vfind "%%~dpg*" >>"%temp%\log.txt" || rd /s/q "%%~dpg" 2>nul
if not exist "%%~dpg" echo.%%~dpg .. deleted >>"%temp%\log.txt"
)
start notepad "%temp%\log.txt"
del %0
Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:
Double click on fix.bat & allow it to run

Post back to tell me what it says
__________________

Question - what have you done for the community today?
sUBs is offline