Oops. I forgot about WINNT. Try again.
Open
Notepad and copy/paste the entire contents of the quotebox below into Notepad:
Quote:
@echo off
attrib -s -r -h "C:\WINNT\system32\dllcache\user32.dll"
del /f /a /q "C:\WINNT\system32\dllcache\user32.dll"
NirCmd wait 2000
copy "C:\WINNT\System32\user32.dll" "C:\WINNT\system32\dllcache"
NirCmd wait 2000
vfind -ltf "%windir%\user32.dll" >log.txt
notepad log.txt
|
Save this Notepad file as
replace.bat and choose to
Save as type: - All Files then close the Notepad file.
It should look like this:
Double-click on
replace.bat to run it. A Notepad file will open. Copy that information into your next reply, please. You may then delete
replace.bat
------------------------------------------------------
Please go to:
VirusTotal- On the page you'll find a Browse button.
- Next to the Browse button you'll see a box to enter text.
- Please copy/paste the following bolded text into the box:
C:\WINNT\system32\dllcache\user32.dll
- Then click the Send File button just below.
- This will scan the file. Please be patient.
- Once scanned, copy and paste the results in your next reply.
------------------------------------------------------
Open HijackThis and click on 'Do a System Scan and Save a Logfile'. Save the logfile and post it here.