Tech Support Forum - View Single Post

**amateur** · 05-06-2008, 07:10 PM

OK. Let's try this:

Boot into Safe Mode.

Go to Start > Run. Copy/Paste or type:

sc stop MsSecurity1.209.4 and then click OK
sc deleteMsSecurity1.209.4 and then click OK

================================

Go to Start > Run and copy/paste the following (exactly as it is, paying attention to the spaces, quote marks, etc), then press Enter:

cmd /c del /a /f /q "C:\WINDOWS\system32\kwrtqvdu.ini"

do the same with the each line below:

cmd /c del /a /f /q "C:\WINDOWS\winself.exe"

cmd /c del /a /f /q "C:\WINDOWS\mrofinu1864.exe"

cmd /c del /a /f /q "C:\DOCUMENS AND SETTINGS\Owner\LOCAL SETTINGS\Temp\ie.exe"

=========================

Restart the computer in Normal Mode. See if you can run the HijackThis now and post the log if you can.

05-06-2008, 07:10 PM	#30 (permalink)
amateur Moderator, Analyst, Security Team Join Date: Jun 2006 Location: Rhode Island, USA Posts: 2,418 OS: XP Home SP3, XP Media Center Edition SP3	Re: Serious Problems! Please Help! OK. Let's try this: Boot into Safe Mode. Go to Start > Run. Copy/Paste or type: sc stop MsSecurity1.209.4 and then click OK sc deleteMsSecurity1.209.4 and then click OK ================================ Go to Start > Run and copy/paste the following (exactly as it is, paying attention to the spaces, quote marks, etc), then press Enter: cmd /c del /a /f /q "C:\WINDOWS\system32\kwrtqvdu.ini" do the same with the each line below: cmd /c del /a /f /q "C:\WINDOWS\winself.exe" cmd /c del /a /f /q "C:\WINDOWS\mrofinu1864.exe" cmd /c del /a /f /q "C:\DOCUMENS AND SETTINGS\Owner\LOCAL SETTINGS\Temp\ie.exe" ========================= Restart the computer in Normal Mode. See if you can run the HijackThis now and post the log if you can. __________________ My services are free. However, you can donate to TSF to help keep it running and prospering. ASAP Last edited by amateur : 05-06-2008 at 07:17 PM.