sUBs

1. Click [Start]>[Run], type services.msc into the [Open] editbox and click the [Ok] button.
2. Locate the Workstation Service Library (Microsoft Locator Service) service and double-click on it to open the Properties dialog.
3. Click the [Stop] button.
4. In the [Startup type] dropdown select [Disabled].
5. Click the [Apply] button and then the [Ok] button.
6. Close the Services window
7. Then start HiJackThis & go to [Config] > [Misc.Tools...] > [Delete an NT service...]
   In the popup box that appears, type in Microsoft Locator Service & click the [OK] button.

~~~~~~~~~~~~~~~

Uninstall the following programs, if present, using [Control Panel]>[Add/Remove Programs] :

• Side Search

Locate & delete this folder - C:\Documents and Settings\Ann Dinh\Application Data\Lycos

~~~~~~~~~~~~~~~

Run a scan with HiJackThis & select(tick) the following & click [Fix checked] :

O23 - Service: Workstation Service Library (Microsoft Locator Service) - Unknown owner - C:\WINDOWS\wkssvc.exe (file missing)


~~~~~~~~~~~~~~~

Using KillBox

Copy to clipboard, all the items below by highlighting them & pressing [CTRL]+[C] on your keyboard.

• C:\WINDOWS\INF\biH.inf
  C:\WINDOWS\SYSTEM32\Xcite.dll
  C:\WINDOWS\SYSTEM32\Xcite.exe

Start KillBox.

1. Go to the [File] menu, and choose [Paste from Clipboard].
   Verify that you've done this properly by clicking the dropdown-arrow next to the [Full Path of File to Delete] field. The filenames you pasted will be found in there.
2. Select/tick the following:
   • "Delete on Reboot"
   • "End Explorer Shell While Killing File"
   • "Unregister.dll Before Deleting" if it's not grayed out.
3. Click the RED X button.
4. Click [Yes] at the 'Delete on Reboot' prompt. Click [Yes] at the Pending Operations prompt.

After rebooting, post a new log