Tech Support Forum - View Single Post - My Hijackthislog....Someone Please Help! I was told to post this here..

sUBs · 05-26-2005, 03:09 AM

Well done O.E., your logs look really clean.

Dont worry about the missing SvcProc & Registry entries. Those measures were introduced to check that Nailer.cmd did it's job. Their absence shows that these malware have been expunged from your system.

Since Norton's Recycle Bin & SpySubtract is uninstalled, you can delete their working folders.

Go to Start > Run > type cmd and press Enter (a command prompt window shall appear)
type rmdir /s C:\RECYCLER\NPROTECT\ and press Enter
type rmdir /s "C:\Program Files\InterMute\" and press Enter
type exit and press Enter

=============================================================
Exercise caution when doing this. Type the letters I listed out in Bold exactly as I laid them.
=============================================================

Run CleanUp once more. This will clear out any lingering leftovers.

Clear Windows' cache of restoration points.

Click Start > Run > type sysdm.cpl & press Enter
Click System Restore Tab
Tick Turn off System Restore on all drives & Click Apply
Then untick Turn off System Restore on all drives & Click OK

Does Norton still report about the W32 SpyWorm? Are there any problems now? If not, you should be set to go.

Make sure to get the latest updates for Windows and Internet Explorer at http://v5.windowsupdate.microsoft.c...t.aspx?ln=en-us.

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided.

05-26-2005, 03:09 AM	#12 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,335 OS: N/A	Well done O.E., your logs look really clean. Dont worry about the missing SvcProc & Registry entries. Those measures were introduced to check that Nailer.cmd did it's job. Their absence shows that these malware have been expunged from your system. Since Norton's Recycle Bin & SpySubtract is uninstalled, you can delete their working folders. Go to Start > Run > type cmd and press Enter (a command prompt window shall appear) type rmdir /s C:\RECYCLER\NPROTECT\ and press Enter type rmdir /s "C:\Program Files\InterMute\" and press Enter type exit and press Enter ============================================================= Exercise caution when doing this. Type the letters I listed out in Bold exactly as I laid them. ============================================================= Run CleanUp once more. This will clear out any lingering leftovers. Clear Windows' cache of restoration points. Click Start > Run > type sysdm.cpl & press Enter Click System Restore Tab Tick Turn off System Restore on all drives & Click Apply Then untick Turn off System Restore on all drives & Click OK Does Norton still report about the W32 SpyWorm? Are there any problems now? If not, you should be set to go. Make sure to get the latest updates for Windows and Internet Explorer at http://v5.windowsupdate.microsoft.c...t.aspx?ln=en-us. To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided.