|
Clcik on Start, then Run ... type services.msc into the box that opens up, and press 'OK'.
On the page that opens, scroll down to System Startup Service or SvcProc ... right click the entry, select 'Properties' and press 'Stop Service'. When it shows that it is stopped, next please set the 'Start-up Type' to 'Disabled'. Press 'OK' until you get back to Windows.
Next, open up HJT, but instead of scanning, click on the "None of the above, just start the program" button at the bottom of the choices. At the lower right, click on the 'Config" button, and then the Misc tools' button ... select 'Delete an NT Service" ... copy/paste the following into the box that opens, and press "OK":
SvcProc
Now, Click on Start, then Run ... type cmd and press "OK".
In the next box that opens, type cd\ and press "Enter". Now you'll see the C: prompt ... looks like this: C:\>
Type cd\windows and then Enter.
Next, type nail.exe /FullRemove (make sure there is a space between nail.exe and the /) ... then Enter.
Next.
Reboot in to Safe Mode.
Delete these files:
C:\WINDOWS\system32\extredir.exe
C:\WINDOWS\system32\ipcrv.exe
C:\WINDOWS\system32\ixipuqy.exe
C:\WINDOWS\Nail.exe
C:\WINDOWS\wpvwdiqga.exe
Go back into Normal mode and run a HJT scan and Virus Scan. Give us the results.
|