Whereas files in System Volume Information are concerned, we can leave it for the moment. When we have fully disnfected you, we'll flush the that directory.
You still owe me a Panda scan result.
= = = = = = = = = = =
Please download these additional files/programs. Unless otherwise stated, they should be stored in same directory as the HiJackThis program. Do not run them unless instructed to do so.
peek2.txt - Download & rename it to "peek2.bat" . Double-click on it & wait for notepad to open. Paste the contents in your next reply.
DelO15Domains.inf - Right click & choose "Save As..."
DelO15Domains.inf.
Right click on
DelO15Domains.inf and choose Install. It will run immediately
* you won't be able to see anything happen
Unplug your computer from the Internet when you have finished downloading
= = = = = = = = = = =
Run a HiJackThis scan. Select the following entries & click
Fix checked :
O15 - Trusted Zone: *.skoobidoo.com (HKLM)
O15 - Trusted Zone: *.slotchbar.com (HKLM)
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:\WINDOWS\System32\vbsys2.dll
= = = = = = = = = = =
Start HiJackThis & go to Config>Misc.Tools>
Delete a file on reboot... - In the popup box that appears, type in C:\WINDOWS\System32\vbsys2.dll
- Click the [Open] button.
- Click [Yes] when prompted to restart your computer now.
= = = = = = = = = = =
Reboot & "
pay" me the Panda scan you owed...
I also require a fresh HJT log & peek2.bat's results
__________________
Question - what have you done for the community today?