View Single Post
Old 08-10-2008, 10:44 AM   #16 (permalink)
Mike
Analyst, Security Team
 
Join Date: Jun 2008
Posts: 71
OS: XP SP2


Re: wserv32.exe and csrssd.exe

Hi there,

For the RegistryBooster 2, you might find it named as Uniblue in add or remove programs.
Delete this folder then: C:\Program Files\Uniblue

If still present, fix this line with Hijack This:
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S

Download the latest version of Java Runtime Environment (JRE) 6 Update 7. Once done, uninstall any older versions of Java through add or remove programs.

Go to Kaspersky website and perform an online antivirus scan.
  1. Read through the requirements and privacy statement and click on Accept button.
  2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  3. When the downloads have finished, click on Settings.
  4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  5. Click on My Computer under Scan.
  6. Once the scan is complete, it will display the results. Click on View Scan Report.
  7. You will see a list of infected items there. Click on Save Report As....
  8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.

The scan will take a good amount of time, but it's worth it.

How is your PC running now?
__________________

Mike is offline