Thread: rdriv.sys again
View Single Post
Old 10-22-2005, 08:11 PM   #4 (permalink)
MicroBell
Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter
 
MicroBell's Avatar
 
Join Date: Sep 2004
Location: Carmichaels, PA-USA
Posts: 6,963
OS: Windows 7


Send a message via ICQ to MicroBell Send a message via MSN to MicroBell
Download Hoster http://www.greyknight17.com/spy/Hoster.exe

Download KillBox http://www.bleepingcomputer.com/file...re/KillBox.zip

Run the Cleanup utility again using the same instructions as before. Then reboot into safe mode.

Run the Hoster program and select "Restore Orginal Hosts File"


Run KILL box. Paste the following locations into KILL BOX one at a time. Checkmark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion…say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot.

C:\WINNT\DOWNLOADED PROGRAM FILES\Install.inf
C:\PROGRAMMI\FILE COMUNI\GMT
C:\WINNT\system32\drivers\etc\1.hosts
C:\WINNT\system32\updates.pif
C:\WINNT\system32\Perflib_Perfdata_60c.dat
C:\WINNT\RTSk16.dll
C:\Programmi\Butterfly Oasis Screensaver\BO1Uninstaller.exe


Once you reboot..run another Panda scan and post it's log.
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!





Spyware/Adware Removal Tools
Hijackthis
Ad-aware SE
Spybot Search&Destroy
SpywareBlaster
CWShredder
MicroBell is offline