View Single Post
Old 10-17-2005, 11:23 AM   #7 (permalink)
Vikesrock8411
Analyst, Security Team
 
Vikesrock8411's Avatar
 
Join Date: Jun 2005
Posts: 3,065
OS: Windows XP


Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.

Downloads
KillBox v2.0.0.175.exe (it's important that you get version v2.0.0.175)

Luna.zip- Unzip that file to C:\WINDOWS\Resources\Themes\Luna. Then right click on your Desktop and go to Properties ... and look if Windows XPstyle is now present again. Choose apply and OK. If not, reboot and check again.

Tools
Start HijackThis & Go to Config> Misc Tools > Open ADS Spy

1. Checkmark/tick - Ignore Safe System Info Streams
2. Click Scan
3. When it has finished scanning, checkmark/tick all that it found
4. Click Remove Selected

Launch KillBox.exe & select the following options:
  • delete on Reboot
Select all the filenames below & then right-click & select Copy
  • C:\WINDOWS\system32\ts.ico
    C:\WINDOWS\system32\cmd.ftp
    C:\WINDOWS\inf\dm.inf
    c:\WINDOWS\system32\thaa.dll
* Go to the File menu, and choose Paste from Clipboard
* Click the RED X button.
* Click Yes at the Delete on Reboot prompt.
* Click Yes at the 'Pending Operations prompt'.

In your next post please include:
  • A new Hijackthis! Log
Vikesrock8411 is offline