View Single Post
Old 08-21-2005, 05:56 AM   #9 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,353
OS: N/A


Uninstall the following programs, if present, using Control Panel->Add/Remove Programs:
  • Fun Web Products Easy Installer


Locate and delete the following folders, if present:
  • C:\PROGRAM FILES\FunWebProducts
    C:\WINNT\SYSTEM32\SahImages
Locate and delete the following files:
  • C:\WINNT\SYSTEM32\ide21201.vxd
    C:\Program Files\hijack this\backups\backup-20050821-002022-486.inf


Then, download Trend Micro™ Anti-Spyware (by clicking the "Scan and Clean your PC" button).
  • Double-click the tmas-web-scan.exe icon
  • It will say "Loading TrendMicro definitions".
  • Click "Start Scan"
After it's done scanning, click "Scan Results"
  • Make sure all items found have a check next to them, then click "Clean Threats Now".
  • Click Exit.
Reboot your computer. I then need you to repeat the same procedure above again... using the TrendMicro tool. I need the log from the second scan/clean...NOT the first...as this will contain what’s left in the system.

In place of the TrendMicro icon will be a text file called "Antispyware.log", please double-click that log and copy the entire contents and paste them here along with a fresh HJT log
__________________

Question - what have you done for the community today?
sUBs is offline