View Single Post
Old 12-07-2005, 08:31 PM   #7 (permalink)
rikkker
Registered User
 
rikkker's Avatar
 
Join Date: Jul 2005
Location: Canada
Posts: 213
OS: xp-pro


Hi canadieneh02


Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.


=========================================================

You still have Norton and Avg installed on your computer.It is not a good idea to have two Antivirus programs installed at the same time as they will confict with each other.Please uninstall one of them.The choice is up to you as to which one you keep.


==========================================================



Empty your Quarantine folder for Norton. You can do so by following the instructions Here

==========================================================


Download KillBox (it's important that you get version v2.0.0.175)

Launch KillBox.exe & select the following options:
delete on Reboot
Select all the filenames listed below & then right-click & select Copy

C:\messanger.ini
C:\Documents and Settings\Administrator\lc.html
C:\Program Files\Yahoo!\YPSR\Quarantine\20051120105005.zip
C:\WINDOWS\inetdata\winlogon.exe
C:\WINDOWS\system32\lc.html


* Go to the File menu, and choose Paste from Clipboard
* Click the RED X button.
* Click Yes at the Delete on Reboot prompt.
* Click Yes at the 'Pending Operations prompt'.


Quote:
If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run TheKillbox, download and run missingfilesetup.exe Then try Killbox again.

==========================================================

Delete these folders

C:\WINDOWS\inet20002
C:\WINDOWS\inetdata

==========================================================

Please download Cleanup! and install it.<<<- If you still have cleanup please skip this step.


Run Cleanup! using the following configuration:
  1. Click Options...
  2. Set the slider to Standard CleanUp!
  3. Uncheck the following:
    • Delete Newsgroup cache
    • Delete Newsgroup Subscriptions
  4. Click OK
  5. Press the CleanUp! button to start the program. Reboot/logoff when prompted.

* CleanUp! will not create any backups!!

==========================================================

Perform an online scan with Internet Explorer with

Kaspersky WebScanner

Next Click on Launch Kaspersky Anti-Virus Web Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
    • Standard
    • Scan Options:
    • Scan Archives
      Scan Mail Bases
  • Click OK
  • Now under select a target to scan:
    • Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
    • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post.
Take note the names and locations of any file it detects but fails to clean.

* Turn off the real time scanner of any existing antivirus program while performing the online scan

==========================================================

Please post a fresh Hijack This log so that we can check if your system is clean.

How is your system running now?Let me know if you are having any problems.

In your next post i will need fresh logs from:

1)HijackThis
2)Kaspersky scan
rikkker is offline