Hello alaus67 and welcome to TSF
Please print out or copy this page to
Notepad in order to assist you when carrying out the following instructions.
To
turn off System Restore Click Start > Right Click My Computer > Properties. Click the System Restore tab and
Check "Turn off System Restore" or
"Turn off System Restore on all drives". Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK.
Go to
My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the
Hide protected operating system files option.
The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download
CleanUp! (Alternate Link if main link don't work) and install it. You will use this later.
You are running Counter Spy form a temp director. Please move, or reinstall somewhere permanent, such as C:\Program Files be for running CleanUp
Download
FxIstbar.exe and run it.
Note: Removing this adware component from the system will likely cause the program that installed it to not function as intended. The uninstaller generally identifies the programs that will not work after uninstallation.
Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears).
Go into Hijack This->Config->Misc. Tools->Open process manager. Select the following and click
“Kill process” for each one
(You must kill them one at a time).
C:\WINDOWS\vlntbk.exe
Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs:
ISTsvc >>If it still exists
Open Hijack This and click on Scan. Check the following entries
(make sure you do not miss any)
O4 - HKLM\..\Run: [fPb7PjD] C:\WINDOWS\vlntbk.exe
O4 - HKLM\..\Run: [Á ³# K"h'þ9Óœ÷3rÅ WC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\vlntbk.exe
Please remember to close all other windows, including browsers then click Fix checked.
Run CleanUp! and click on CleanUp! button. When it asks you if you want to logoff, click on Yes.
Delete the following Files indicated in
RED and Folders indicated in
BLUE if they still exist.
C:\WINDOWS\
vlntbk.exe
C:\Program Files\
ISTsvc
Reboot your System in normal mode.
If you have a fast internet connection (Broadband), run an online scan at
Trend Micro or
RAV Antivirus.
Please select the “autoclean” option when using Trend Micro.
Please post a fresh Hijack This log ( Without HJT Analyzer) so that we can check if your system is clean.