sUBs

Click Start->Run - type SERVICES.MSC & then click on the OK button

1. Locate the service - Content Monitoring Tool (msCMTSrvc)
2. Double-click on it to open the Properties dialog.
   • Under the General tab, note down the name of "Service name". We shall need it later.
   • Stop the service by using the Stop button.
   • Change the Startup type to Disabled & then click on the OK button
3. Then start HiJackThis & go to Config>Misc.Tools...> Delete an NT service...
4. In the popup box that appears, type in "Service name" & then click on the OK button

Please locate & delete these files/folders:

C:\PROGRAM FILES\COMMON FILES\services.exe
C:\WINDOWS\pcconfig.dat
C:\Documents and Settings\Owner.MaryPC\Favorites\Casino & Carrers
C:\downloads\Sorrows_Furnace_Mini-Pak.exe
C:\Program Files\AIM95\mc-110-12-0000080.exe
C:\Program Files\Common Files\InetGet\
C:\Program Files\Common Files\InetGet2\
C:\Program Files\Common Files\mc-110-12-0000080.exe
C:\Program Files\Common Files\services.exe
C:\Program Files\Common Files\system32.dll
C:\Program Files\DNS\
C:\WINDOWS\inf\strip-player.inf

Let me know if you were unable to find any of those files.


Download Trend Micro™ Anti-Spyware (by clicking the "Scan and Clean your PC" button).

• Double-click the tmas-web-scan.exe icon
• It will say "Loading TrendMicro definitions".
• Click "Start Scan"

After it's done scanning, click "Scan Results"

• Make sure all items found have a check next to them, then click "Clean Threats Now".
• Click Exit.

Reboot your computer. I then need you to repeat the same procedure above again... using the TrendMicro tool. I need the log from the second scan/clean...NOT the first...as this will contain what’s left in the system.

In place of the TrendMicro icon will be a text file called "Antispyware.log", please double-click that log and copy the entire contents and paste them here along with a new HJT log.

Let me know if you still have anymore issue with the computer.