View Single Post
Old 03-01-2005, 03:56 AM   #4 (permalink)
MicroBell
Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter
 
MicroBell's Avatar
 
Join Date: Sep 2004
Location: Carmichaels, PA-USA
Posts: 6,963
OS: Windows 7


Send a message via ICQ to MicroBell Send a message via MSN to MicroBell
Please print this instructions out as you will have no access to the net.
Download and install CleanUp http://cleanup.stevengould.org/
Download KillBox http://www.bleepingcomputer.com/file...re/KillBox.zip

Open My Computer>>Tools>>Folder Options>>View>> Hidden files and folders>> select show hidden files and folders. Uncheck the Hide protected operating system files. Disable system restore by clicking Start>>Settings>>Control Panel>> Double-click the System icon Performance tab>>File System>>Troubleshooting tab, and then check Disable System Restore

Now download the Win98Fix from http://www.greyknight17.com/spy/Win98Fix.zip and extract the files to a folder called C:\Win98fix which you should create.

**Note** My Understanding is this reg file also works for Windows ME

Disconnect the PC from internet access.

Open the Win98fix folder you created and double click on the RunFix.reg file. If it prompts you to merege the information say YES.

Now delete that “spawner” file C:\WINDOWS\WININVT.LOG

Now run the cleanup utility and reboot/logoff when prompted.

If you can't delete that file....use killbox with these instructions.

Run KILL box. Paste the following locations into KILL BOX one at a time. Checkmark the box that says "Delete on Reboot", "Unload Explorer Shell", and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask to reboot now...click YES

C:\WINDOWS\WININVT.LOG

Once you reboot...reconnect your internet access. Repost both a hijackthis log and startdreck log and we will continue with the cleaning.
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!





Spyware/Adware Removal Tools
Hijackthis
Ad-aware SE
Spybot Search&Destroy
SpywareBlaster
CWShredder

Last edited by MicroBell; 03-01-2005 at 04:03 AM.
MicroBell is offline