View Single Post
Old 11-22-2005, 11:47 PM   #6 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,478
OS: N/A


If you have not done so already, please enable the viewing of Hidden files
From Windows Explorer, go to Tools>Folder Options> View tab.
  • Tick - Show hidden files and folder
  • Untick - Hide file extensions for known types
  • Untick - Hide protected operating system files
Click Yes to confirm & then click OK

Locate and delete the following files/folders: (let me know if you fail to find/delete any)
  • C:\PROGRAM FILES\Save
    C:\Program Files\lrte\
    C:\Program Files\oetl\
    C:\Program Files\sooe\
    C:\WINDOWS\system32\drivers\etc\hosts.20051112-180450.backup
    C:\WINDOWS\system32\i
    C:\WINDOWS\system32\msshed32.exe


Click Start->Run - type SERVICES.MSC & then click on the OK button
  1. Locate the service - Service Hosts (ServiceHost)
  2. Double-click on it to open the Properties dialog.
    • Stop the service by using the Stop button.
    • Change the Startup type to Disabled & then click on the OK button
  3. Then start HiJackThis & go to Config>Misc.Tools...> Delete an NT service...
  4. In the popup box that appears, type in ServiceHost & then click on the OK button
Answer Yes when prompted to reboot

After you have rebooted, go to http://WindowsUpdate. & install all available Critical Updates. Patch your system with the most current security fixes and plug all known vulnerabilities.

Post a new log after that
__________________

Question - what have you done for the community today?
sUBs is offline