View Single Post
Old 02-22-2006, 03:21 PM   #13 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,353
OS: N/A


Something is preventing L2Mfix from doing a clean job. Let's workaround that. We're gonna run L2MFix with some revised instructions... I will highlight the changes in blue


Launch HijackThis but do not do anything with it yet. Just leave it opened. Close any other programs you have open since this step requires a reboot.
  • From the l2mfix folder, double click l2mfix.bat
  • Select option #2 for Run Fix by typing 2 and then pressing enter ONCE.
when it get's to the stage where it ask you to press any key to reboot, go to HijackThis. Do a scan and select these entries to be fixed:
O20 - Winlogon Notify: Shell Extensions - C:\WINDOWS\system32\lvnm0951e.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
DO NOT FIX THESE OTHER 020 ENTRIES. THOSE'RE LEGIT
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll

After those entries are fixed, go back to the l2mfix window. Activate the window and press any key for the machine to reboot.

On the reboot notepad will open with a log. Copy/paste the contents of that log back into this thread, along with a new hijackthis log.


I would also want you to run L2MFix once more after this. But run option #1
This will scan your computer and it may appear as if nothing is happening for a period of few minutes. When it has finished, you will be presented with a log. Copy the contents of that log and paste it into this thread.
__________________

Question - what have you done for the community today?
sUBs is offline