Tech Support Forum - View Single Post

**POADB** · 08-28-2005, 03:12 AM

Download KillBox http://www.greyknight17.com/spy/KillBox.exe.

Run KillBox and check the box that says 'End Explorer Shell While Killing File'. Next click on 'Delete on Reboot'. For each of the following files below, check the box that says 'Unregister .dll Before Deleting' if it's not grayed out. Copy and paste each of the following into KillBox (hitting the X button for each file - Choose YES when informs you the file will be deleted on Reboot. Choose NO when it asks if you want to reboot):

C:\WINDOWS\SYSTEM32\tsuninst.exe
C:\WINDOWS\DOWNLOADED PROGRAM FILES\initial.inf
C:\WINDOWS\DOWNLOADED PROGRAM FILES\YSBactivex.inf
C:\WINDOWS\FT1_02_0_402_GEPFAH.EXE
C:\Documents and Settings\Mark Davies\Local Settings\Application Data\Microsoft\Internet Explorer\V0.26.dat
C:\Program Files\HijackThis\backups\backup-20050330-195006-831.inf
C:\WINDOWS\Downloaded Program Files\initial.inf
C:\WINDOWS\Downloaded Program Files\internazionale_ver4.INF
C:\WINDOWS\Downloaded Program Files\YSBactivex.inf

Delete this folder:

C:\DOCUMENTS AND SETTINGS\MARK DAVIES\FAVORITES\Fun & Games

Please visit this website - virusscan.jotti.org
Submit these file(s) for a comprehensive scan & then post the results back here.

C:\WINDOWS\system32\drivers\disdn\servu.exe

Please download Trend Micro™ Anti-Spyware for the Web Utility (by clicking the "Scan and Clean your PC" button).

Save it to your desktop.
Double-click the new icon on your desktop (tmas-web-scan.exe)
It will say "Loading TrendMicro definitions".
Once the definitions are loaded, the program will appear to close then re-open.
Click "Start Scan"
After it's done scanning, click "Scan Results"
Make sure all items found have a check next to them, then click "Clean Threats Now".
Click Exit.

Reboot your computer. In place of the TrendMicro icon will be a text file called "Antispyware.log", please double-click that log and copy the entire contents and paste them in your next post.

Please run an online virus scan at Panda ActiveScan. Save the results and bring them with you in your next post.

08-28-2005, 03:12 AM	#4 (permalink)
POADB Moderator, Microsoft Support Join Date: Jul 2004 Location: United Kingdom Posts: 6,481 OS: XP SP2	Download KillBox http://www.greyknight17.com/spy/KillBox.exe. Run KillBox and check the box that says 'End Explorer Shell While Killing File'. Next click on 'Delete on Reboot'. For each of the following files below, check the box that says 'Unregister .dll Before Deleting' if it's not grayed out. Copy and paste each of the following into KillBox (hitting the X button for each file - Choose YES when informs you the file will be deleted on Reboot. Choose NO when it asks if you want to reboot): C:\WINDOWS\SYSTEM32\tsuninst.exe C:\WINDOWS\DOWNLOADED PROGRAM FILES\initial.inf C:\WINDOWS\DOWNLOADED PROGRAM FILES\YSBactivex.inf C:\WINDOWS\FT1_02_0_402_GEPFAH.EXE C:\Documents and Settings\Mark Davies\Local Settings\Application Data\Microsoft\Internet Explorer\V0.26.dat C:\Program Files\HijackThis\backups\backup-20050330-195006-831.inf C:\WINDOWS\Downloaded Program Files\initial.inf C:\WINDOWS\Downloaded Program Files\internazionale_ver4.INF C:\WINDOWS\Downloaded Program Files\YSBactivex.inf Delete this folder: C:\DOCUMENTS AND SETTINGS\MARK DAVIES\FAVORITES\Fun & Games Please visit this website - virusscan.jotti.org Submit these file(s) for a comprehensive scan & then post the results back here. C:\WINDOWS\system32\drivers\disdn\servu.exe Please download Trend Micro™ Anti-Spyware for the Web Utility (by clicking the "Scan and Clean your PC" button). Save it to your desktop. Double-click the new icon on your desktop (tmas-web-scan.exe) It will say "Loading TrendMicro definitions". Once the definitions are loaded, the program will appear to close then re-open. Click "Start Scan" After it's done scanning, click "Scan Results" Make sure all items found have a check next to them, then click "Clean Threats Now". Click Exit. Reboot your computer. In place of the TrendMicro icon will be a text file called "Antispyware.log", please double-click that log and copy the entire contents and paste them in your next post. Please run an online virus scan at Panda ActiveScan. Save the results and bring them with you in your next post. __________________