MicroBell

Well...you were clean .....

Download and install CleanUp! but do not run it yet.
*NOTE* Cleanup deletes EVERYTHING out of temp/temporary folders and does not make backups.


Download, install, and update Ewido Security Suite

• Install ewido security suite
• Launch ewido, there should be a big E icon on your desktop, double-click it.
• The program will prompt you to update click the OK button
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Click on Start

The update will start and a progress bar will show the updates being installed.
After the updates are installed, exit Ewido

Download KillBox http://www.bleepingcomputer.com/file...re/KillBox.zip

Reboot into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode, then hit enter.

Now delete these folders...

C:\WINNT\system32\FLEOK
C:\Documents and Settings\Reg1\Application Data\Lycos
C:\WINNT\system32\fiz1


Run KILL box. Paste the following locations into KILL BOX one at a time. Checkmark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion…say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot.


C:\WINNT\downloaded program files\ATPartners.inf
C:\WINNT\system32\bUS.dll
C:\WINNT\system32\RxBarSetup.dll
C:\WINNT\system32\spool\drivers\scrnsund.pif
C:\WINNT\system32\msbb321.dll
C:\WINNT\system32\xmlparse.dll
C:\WINNT\system32\xmltok.dll
C:\WINNT\system32\kyf.dat
C:\WINNT\system32\RxBarSetup.dll
C:\WINNT\system32\MegasearchBarSetup.dll
C:\WINNT\inf\biU.inf
C:\WINNT\inf\biini.inf
C:\WINNT\inf\polmx2.inf
C:\WINNT\Downloaded Program Files\ATPartners.inf
C:\naxuhu.exe
C:\aintbad.exe

Once you reboot...boot back to safe mode.

Run Ewido:

• Click [Scanner]
• Click [Complete System Scan] to begin scanning.
• Click [OK] when prompted to clean files
• With the first file it prompts to clean, select the option - "Perform action on all infections" - & choose clean and click [OK].
• Once finished, click the [Save report] button
• Save the report to your desktop

Close Ewido

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu). Set the program up as follows:
*Click "Options..."
*Move the arrow down to "Custom CleanUp!"
*Put a check next to the following:

• Empty Recycle Bins
• Delete Cookies
• Delete Prefetch files
  [X]Scan local drives for temporary files (Please uncheck this option)
• Cleanup! All Users

Click OK
Press the CleanUp! button to start the program. Reboot/logoff when prompted.

ONce back to normal mode..run another Panda scan and post it's log along with the log from the Ewido scan.