Hi again
Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.
Combofix
- Close any open browsers.
- Open notepad and copy/paste the text in the box below into it:
Code:
File::
C:\WINDOWS\bmlvqkn.dll
C:\WINDOWS\agrlmvp.dll
Folder::
C:\Documents and Settings\All Users\Application Data\Viewpoint
Looking at the image below as an example
Save this as
CFScript.txt, in the same location as ComboFix.exe
Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it will produce a log for you at
"C:\ComboFix.txt"
Do not mouseclick combofix's window whilst it's running. This may cause it to stall.
CAUTION! Anyone else thinking of using the above script does so at their own risk - you may end up having to re-install Windows!
Please post the log
C:\ComboFix.txt along with a fresh
HijackThis Log for further review.
Java Update
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.
Updating Java:- Download the latest version of Java Runtime Environment (JRE) 6 u4.
- Scroll down to where it says "The Java SE Runtime Environment (JRE) allows end-users to run Java applications". (4th one down)
- Click the "Download" button to the right.
- In the pull down menu next to platform select Windows
- Check the box that says: "I agree to the Java SE Runtime Environment 6 License Agreement ".
- Click continue.
- Click on the link to download Windows Offline Installation and save to your desktop.
- Close any programs you may have running - especially your web browser.
- Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
- Check any item with Java Runtime Environment (JRE or J2SE) in the name.
- Click the Remove or Change/Remove button.
- Repeat as many times as necessary to remove each Java versions.
- Reboot your computer once all Java components are removed.
- Then from your desktop double-click on jre-6u4-windowsi586-p.exe to install the newest version.
Online Scan
Establish an internet connection & perform an online scan with
Internet Explorer at
Kaspersky WebScanner
Next Click on
Kaspersky Online Scanner
A Welcome screen will appear - click 'Accept' at the bottom. You will be prompted to install an ActiveX component from Kaspersky, Click
Yes.- The program will launch and then begin downloading the latest definition files:
- Once the files have been downloaded click on NEXT
- Now click on Scan Settings
- In the scan settings make that the following are selected:
Scan using the following Anti-Virus database:Scan Options:- Scan Archives
- Scan Mail Bases
Click
OK
Now under select a target to scan: Select
My Computer- This will program will start and scan your system.
- The scan will take a while so be patient and let it run.
- Once the scan is complete it will display if your system has been infected.
Now click on the
Save as Text button:
- Save the file to your desktop.
- Copy and paste that information in your next post.
Take note of the name(s) and location(s) of any file(s) it detects but fails to clean.
* Turn off the real time scanner of any existing antivirus program while performing the online scan
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%.
Logs required
c:/combofix.txt
Kaspersky Log
HijackThis Log
How is your system running now?