View Single Post
Old 01-08-2006, 01:09 AM   #7 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,479
OS: N/A


Please post Ewido's report. It's an intergral part of the fix. I hope you have conducted the fix in the correct order/sequence.

For the meanwhile, please do the following ...


* * * * * * ADDITIONAL DOWNLOADS * * * * * * * * * * * * * *


Right click on this & choose "Save As..." DelO15Domains.inf - DelO15Domains.inf
Right click on DelO15Domains.inf and choose Install. It will run immediately (you won't be able to see anything happen). You may delete the file afterwards.

Host.zip - From within Host.zip, double click on MVPS.bat & allow it to run.

Right click on this & select 'Save As' - DNSManual.bat
Doubleclick on DNSManual.bat & allow it to run.

SpywareBlaster 3.5.1
Install & update SpywareBlaster with the latest definitions.
After you have updated, click the button - enable protection for all unprotected items

IE-SpyAD - Extract the contents to a new folder
From within the folder, double-click install.bat
Select Option #2 - Install the new IE-SPYAD list.
Then return to the main menu.
Select option #4 - Add the old porn sites domain

missingfilesetup.exe. Then try Killbox again.[/size]


* * * * * * FIXING ENTRIES WITH HIJACKTHIS * * * * * * * * * *


Do a HijackThis scan & place a check next to these items and select "Fix checked":

O4 - HKLM\..\Run: [dmgpx.exe] C:\WINDOWS\system32\dmgpx.exe


* * * * * * DELETING FILES/FOLDERS * * * * * * * * * * * * * * *


Locate and delete the following files/folders:
  • C:\WINDOWS\SYSTEM32\CSEMP.EXE
    C:\WINDOWS\SYSTEM32\DMZZO.EXE
    C:\WINDOWS\System32\PZXZY.DLL
    C:\WINDOWS\system32\dmgpx.exe


Run CleanUp! again & reboot before posting a new HJT log
__________________

Question - what have you done for the community today?
sUBs is offline