Tech Support Forum - View Single Post - Searchdom, loaders and virus Influx 'HELP'?

MicroBell · 03-09-2005, 05:58 PM

Yes..log in as the Admin. If your being denied access to that file then explorer.exe folder and the files entry is still in place in the registry. Try removing it manually while in safe mode. Things must be done...in the order I listed. That registry entry..needs removed..before deleting the file.

Download KillBox http://www.bleepingcomputer.com/file...re/KillBox.zip

Redo the fix...but this time when deletiing that file...use Killbox with these instructions..

Run KILL box. Paste the following locations into KILL BOX one at a time. Checkmark the box that says "Delete on Reboot", Unload Explorer Shell", and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask to reboot now...click YES

C:\WINDOWS\system32\tasker32.exe

On the reboot...boot back to safe mode and continue with the fix. So..

1. Reboot to safe mode
2. Delete that explorer.exe folder and REBOOT..back to safe mode.
3. Use Killbox..paste the path to the file in the box.
4. On the reboot...boot back to safe mode..run hijack..remove the device manager entrys.

03-09-2005, 05:58 PM	#41 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,963 OS: Windows 7	Yes..log in as the Admin. If your being denied access to that file then explorer.exe folder and the files entry is still in place in the registry. Try removing it manually while in safe mode. Things must be done...in the order I listed. That registry entry..needs removed..before deleting the file. Download KillBox http://www.bleepingcomputer.com/file...re/KillBox.zip Redo the fix...but this time when deletiing that file...use Killbox with these instructions.. Run KILL box. Paste the following locations into KILL BOX one at a time. Checkmark the box that says "Delete on Reboot", Unload Explorer Shell", and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask to reboot now...click YES C:\WINDOWS\system32\tasker32.exe On the reboot...boot back to safe mode and continue with the fix. So.. 1. Reboot to safe mode 2. Delete that explorer.exe folder and REBOOT..back to safe mode. 3. Use Killbox..paste the path to the file in the box. 4. On the reboot...boot back to safe mode..run hijack..remove the device manager entrys. __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder Last edited by MicroBell; 03-09-2005 at 06:03 PM.