View Single Post
Old 10-19-2005, 07:39 AM   #12 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,348
OS: N/A


Please visit this website - http://virusscan.jotti.org
Submit these file(s) for a comprehensive scan & then post the results back here.

C:\WINDOWS\Drivers\exps.exe

If found to be malicious, add it to the file deletion list found below.



* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


If you have not done so already, please enable the viewing of Hidden files
From Windows Explorer, go to Tools>Folder Options> View tab.
  • Tick - Show hidden files and folder
  • Untick - Hide file extensions for known types
  • Untick - Hide protected operating system files
Click Yes to confirm & then click OK

Locate and delete the following folders, if present:
  • C:\PROGRAM FILES\Windows ControlAd
Locate and delete the following files:
  • C:\WINDOWS\DOWNLOADED PROGRAM FILES\Install.inf
    C:\WINDOWS\INF\dm.inf
    C:\WINDOWS\addins\kbc.exe
    C:\WINDOWS\Config\iisbak.exe
    C:\WINDOWS\dnsun.exe
    C:\WINDOWS\Downloaded Program Files\flash.inf
    C:\WINDOWS\Help\antinet.exe
    C:\WINDOWS\java\classes\expnut.exe
    C:\WINDOWS\repair\dllinfo.exe
    C:\WINDOWS\security\cabkey.exe
    C:\WINDOWS\security\logs\dvdmain.exe
    C:\WINDOWS\system\cateula.exe
    C:\WINDOWS\system\vbac.exe
    C:\WINDOWS\system32\ctts.exe
    C:\WINDOWS\Tasks\assrv.exe
    C:\WINDOWS\Tasks\dnsmain.exe

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


Note: For any file you cannot find, we'll use Killbox for it...

Launch KillBox.exe & select the following options:
  • delete on Reboot
Select all the filenames listed below & then right-click & select Copy
  • C:\WINDOWS\DOWNLOADED PROGRAM FILES\Install.inf
    C:\WINDOWS\INF\dm.inf
    C:\WINDOWS\addins\kbc.exe
    C:\WINDOWS\Config\iisbak.exe
    C:\WINDOWS\dnsun.exe
    C:\WINDOWS\Downloaded Program Files\flash.inf
    C:\WINDOWS\Help\antinet.exe
    C:\WINDOWS\java\classes\expnut.exe
    C:\WINDOWS\repair\dllinfo.exe
    C:\WINDOWS\security\cabkey.exe
    C:\WINDOWS\security\logs\dvdmain.exe
    C:\WINDOWS\system\cateula.exe
    C:\WINDOWS\system\vbac.exe
    C:\WINDOWS\system32\ctts.exe
    C:\WINDOWS\Tasks\assrv.exe
    C:\WINDOWS\Tasks\dnsmain.exe
* Go to the File menu, and choose Paste from Clipboard
* Click the RED X button.
* Click Yes at the Delete on Reboot prompt.
* Click Yes at the 'Pending Operations prompt'.


Let me know how that went. Also let me know if you still have any other issues with your computer.
__________________

Question - what have you done for the community today?
sUBs is offline