Tech Support Forum - View Single Post

dorts · 05-09-2008, 05:58 AM

Hello and welcome back to TSF.

Fixes with HijackThis

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)

O16 - DPF: {343CE214-9998-4B21-A151-FFE970167297} - http://xscanner.spyshredderscanner.c...up/webinst.cab
O20 - Winlogon Notify: svshost - svshost.dll (file missing)

Please remember to close all other windows, including browsers then click Fix checked.

Files and Folders Deletion

Delete the following File indicated in RED if it still exist.

C:\Program Files\instaler.exe

If the file resist deletion, please boot into safe mode and delete.

Online Scan

Using Internet Explorer, visit http://www.kaspersky.com/kos/eng/par...avwebscan.html

Answer Yes, when prompted to install an ActiveX component.

The program will then begin downloading the latest definition files.
Once the files have been downloaded click on NEXT
Locate the Scan Settings button & configure to:
- Scan using the following Anti-Virus database:
  - Extended
- Scan Options:
  - Scan Archives
  - Scan Mail Bases
Click OK & have it scan My Computer
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan

Logs

Please post the following logs in your next reply...

Kaspersky's Online Scan Log
A Fresh New HijackThis Log

How is your system behaving now?

05-09-2008, 05:58 AM	#7 (permalink)
dorts Analyst, Security Team Join Date: Mar 2006 Location: Singapore Posts: 1,604 OS: Windows XP SP2 My System	Re: Constant window minimising/tab Hello and welcome back to TSF. Fixes with HijackThis Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any) O16 - DPF: {343CE214-9998-4B21-A151-FFE970167297} - http://xscanner.spyshredderscanner.c...up/webinst.cab O20 - Winlogon Notify: svshost - svshost.dll (file missing) *Please remember to close all other windows, including browsers then click Fix checked.* Files and Folders Deletion Delete the following File indicated in RED if it still exist. C:\Program Files\instaler.exe If the file resist deletion, please boot into safe mode and delete. Online Scan Using Internet Explorer, visit http://www.kaspersky.com/kos/eng/par...avwebscan.html Answer Yes, when prompted to install an ActiveX component. The program will then begin downloading the latest definition files. Once the files have been downloaded click on NEXT Locate the Scan Settings button & configure to: Scan using the following Anti-Virus database: Extended Scan Options: Scan Archives Scan Mail Bases Click OK & have it scan My Computer Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it. Click the Save as Text button to save the file to your desktop so that you may post it in your next reply * Turn off the real time scanner of any existing antivirus program while performing the online scan Logs Please post the following logs in your next reply... Kaspersky's Online Scan Log A Fresh New HijackThis Log How is your system behaving now? __________________ If you think TSF have helped you, please kindly donate to TSF and help keep this site free to all.