Tech Support Forum - View Single Post

**Omerr** · 05-31-2005, 11:35 AM

Hello and welcome to TSF

Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.

You are using an outdated version of Hijack This. Please download and install the latest version by going to this Site

MSN Messenger Plus 3 – This program may come with a problematic software. If you intentionally installed it yourself – ignore the fixes relating to it in my post. Otherwise, continue and do everything below.

Go to My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option. Please do NOT change any of those settings until we finish the fixing process.

Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears).

Go into Hijack This->Config->Misc. Tools->Open process manager. Select the following and click “Kill process” for each one (If they still exist)(You must kill them one at a time).

C:\Program Files\Messenger Plus! 3\MsgPlus.exe

Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs:

Messenger Plus! 3

Open Hijack This and click on Scan. Check the following entries (make sure you do not miss any)

O4 - HKLM\..\Run: [less beep slow file] C:\Documents and Settings\All Users\Application Data\Nurbcomplessbeep\campfor.exe >>> Do you know what that is? If you don’t – fix it.
O4 - HKCU\..\Run: [chinvga] C:\DOCUME~1\PHILIP~1\APPLIC~1\intrabin\Skip tick.exe >>> Do you know what that is? If you don’t – fix it.
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"

Please remember to close all other windows, including browsers then click Fix checked.

Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.

C:\Documents and Settings\All Users\Application Data\Nurbcomplessbeep >>> Delete only if you don’t know what it is.
C:\DOCUME~1\PHILIP~1\APPLIC~1\intrabin >>> Delete only if you don’t know what it is.
C:\Program Files\Messenger Plus! 3

Reboot your system in Normal Mode.

If you have a fast internet connection (Broadband), run an online scan at Trend Micro or RAV Antivirus.
Please select the “autoclean” option when using Trend Micro.

Please post a fresh Hijack This log so that we can check if your system is clean.

05-31-2005, 11:35 AM	#3 (permalink)
Omerr TSF Enthusiast Join Date: Feb 2005 Location: Israel Posts: 1,032 OS: XP Proffesional	Hello and welcome to TSF Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions. You are using an outdated version of Hijack This. Please download and install the latest version by going to this Site MSN Messenger Plus 3 – This program may come with a problematic software. If you intentionally installed it yourself – ignore the fixes relating to it in my post. Otherwise, continue and do everything below. Go to My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option. Please do NOT change any of those settings until we finish the fixing process. Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears). Go into Hijack This->Config->Misc. Tools->Open process manager. Select the following and click “Kill process” for each one (If they still exist)(You must kill them one at a time). C:\Program Files\Messenger Plus! 3\MsgPlus.exe Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs: Messenger Plus! 3 Open Hijack This and click on Scan. Check the following entries (make sure you do not miss any) O4 - HKLM\..\Run: [less beep slow file] C:\Documents and Settings\All Users\Application Data\Nurbcomplessbeep\campfor.exe >>> Do you know what that is? If you don’t – fix it. O4 - HKCU\..\Run: [chinvga] C:\DOCUME~1\PHILIP~1\APPLIC~1\intrabin\Skip tick.exe >>> Do you know what that is? If you don’t – fix it. O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" *Please remember to close all other windows, including browsers then click Fix checked.* Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist. C:\Documents and Settings\All Users\Application Data\Nurbcomplessbeep >>> Delete only if you don’t know what it is. C:\DOCUME~1\PHILIP~1\APPLIC~1\intrabin >>> Delete only if you don’t know what it is. C:\Program Files\Messenger Plus! 3 Reboot your system in Normal Mode. If you have a fast internet connection (Broadband), run an online scan at Trend Micro or RAV Antivirus. Please select the “autoclean” option when using Trend Micro. Please post a fresh Hijack This log so that we can check if your system is clean.