Please print out or copy this page to
Notepad in order to assist you when carrying out the following instructions.
Viewing Hidden Files
Go to
My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the
Hide protected operating system files option.
Downloads(make sure to save these in a permanent location)
VundoFix.exe Double-click
VundoFix.exe to extract the files
Cleanup! (
Alternate Link)- Install it. You will use this later.
*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does not make backups.
Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears).
Open the
VundoFix folder and doubleclick on
KillVundo.bat- You will first be presented with a warning.
It should look like this
Quote:
VundoFix V2.15 by Atri
By using VundoFix you agree that you are doing so at your own risk
Press enter to continue....
|
- At this point press enter one time.
- Next you will see:
Quote:
Please Type in the filepath as instructed by the forum staff
and then press enter:
|
- At this point please type the following file path (make sure to enter it exactly as below!):
- C:\WINDOWS\system32\mljgh.dll
- Press Enter to continue with the fix.
- Next you will see:
Quote:
Please type in the second filepath as instructed by the forum
staff then press enter:
|
- At this point please type the following file path (make sure to enter it exactly as below!):
- C:\WINDOWS\system32\hgjlm.*<< The * is part of the filepath
- Press Enter to continue with the fix.
- The fix will run then HijackThis will open, if it does not open automatically please open it manually.
- In HiJackThis, please place a check next to the following items and click FIX CHECKED:
- O2 - BHO: MSEvents Object - {CE70731D-F28D-4D81-9D61-C8EE60378401} - C:\WINDOWS\system32\mljgh.dll
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O20 - Winlogon Notify: mljgh - C:\WINDOWS\system32\mljgh.dll
- After you have fixed these items, close Hijackthis.
- Press enter to exit the program then manually reboot your computer.
- Once your machine reboots please continue with the instructions below.
Open
Cleanup! by double-clicking the icon on your desktop (or from Start > All Programs). Set the program up as follows:
Click
Options
Move the slider button down to
Custom CleanUp!
Check the following:
- Empty Recycle Bins
- Delete Cookies
- Delete Prefetch files
- Cleanup! All Users
Uncheck the following :
- Scan local drives for temporary files
Click
OK, Press the
CleanUp! button to start the program click
no if prompted to reboot.
Online Scans
Perform an online scan with Internet Explorer with
Panda ActiveScan
**
click on "Free use ActiveScan" located on the top right hand corner - Click Scan your PC & a 'pop up' window shall appear. *ensure that your pop up blocker doesn't block it
- Click Scan Now
- Enter your e-mail address & click Scan Now ...begins downloading 8 MB Panda's ActiveX controls
Begin the scan by selecting
My Computer- If it finds any malware, it will offer you a report.
- Click on see report. Then click Save report
Post the contents of the report in your next reply
*You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
*Turn off the real time scanner of any existing antivirus program while performing the online scan
In your next post please include:
- Vundofiles.txt from the Vundofix folder
- Panda Activescan Log
- A new Hijackthis! Log