Tech Support Forum - View Single Post

sUBs · 02-22-2006, 04:36 PM

Read through the entire passage before beginning this fix. It's a bit complicated.

Download the file I've attached to this post - l2m.zip

Download KillBox v2.0.0.175.exe (it's important that you get version v2.0.0.175)

______________

Double-click on Killbox.exe to run the program.

At the bottom right of the main screen, click on the arrow to the right of System Process
(The area is to the left of the yellow triangle.)
Select the following entry: rundll32.exe
Now click the yellow triangle to End Task

Wait a few seconds, and check again for rundll32.exe, as it may reload!
If so, End Task once again.

Next, open l2m.zip & doubleclick on l2m.bat

______________

Go to Killbox & select the following options:

delete on Reboot

Use your mouse to select all the filenames highlighted in blue & then right-click & select Copy

C:\WINDOWS\system32\guard.tmp
C:\WINDOWS\system32\e4020edoeh0c0.dll
C:\WINDOWS\system32\dcsenh.dll
C:\WINDOWS\system32\l44q0eh5eh4.dll
C:\WINDOWS\system32\lvnm0951e.dll

Go to the File menu, and choose Paste from Clipboard
In the Full Path of File to Delete box you should see the first entry.
- Make sure guard.tmp appears on the list.
- If not, end task for 'rundll32.exe' again. (End Task on rundll32.exe until guard.tmp is on the list!)
Then, highlight the file entries once again and press the Ctrl and the C key at the same time to copy them to the clipboard:
Click on the File menu of Pocket KillBox and select: Paste from Clipboard
- In the Full Path of File to Delete box you should see the first entry. (use the down arrow to see the rest of the files.).guard.tmp must appear on the list!!
Click the RED X button.
Click Yes at the Delete on Reboot prompt.
Click Yes at the 'Pending Operations prompt'.

______________

If the PendingFileRenameOperations error appears , then you must reboot.
Upon reboot, L2M file names may change.
In that case, exit out of KillBox
Run L2MFix Option 1 and post its log in your reply.
>>Please wait for new instructions!!<<

______________

If the PendingFileRenameOperations error does not appear, post a fresh HJT log & a fresh L2Mfix option #1 log after you have rebooted

02-22-2006, 04:36 PM	#18 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,353 OS: N/A	Read through the entire passage before beginning this fix. It's a bit complicated. Download the file I've attached to this post - l2m.zip Download KillBox v2.0.0.175.exe (it's important that you get version v2.0.0.175) ______________ Double-click on Killbox.exe to run the program. At the bottom right of the main screen, click on the arrow to the right of System Process (The area is to the left of the yellow triangle.) Select the following entry: rundll32.exe Now click the yellow triangle to End Task Wait a few seconds, and check again for rundll32.exe, as it may reload! If so, End Task once again. Next, open l2m.zip & doubleclick on l2m.bat ______________ Go to Killbox & select the following options: delete on Reboot Use your mouse to select all the filenames highlighted in blue & then right-click & select Copy C:\WINDOWS\system32\guard.tmp C:\WINDOWS\system32\e4020edoeh0c0.dll C:\WINDOWS\system32\dcsenh.dll C:\WINDOWS\system32\l44q0eh5eh4.dll C:\WINDOWS\system32\lvnm0951e.dll Go to the File menu, and choose Paste from Clipboard In the Full Path of File to Delete box you should see the first entry. Make sure guard.tmp appears on the list. If not, end task for 'rundll32.exe' again. (End Task on rundll32.exe until guard.tmp is on the list!) Then, highlight the file entries once again and press the Ctrl and the C key at the same time to copy them to the clipboard: Click on the File menu of Pocket KillBox and select: Paste from Clipboard In the Full Path of File to Delete box you should see the first entry. (use the down arrow to see the rest of the files.).guard.tmp must appear on the list!! Click the RED X button. Click Yes at the Delete on Reboot prompt. Click Yes at the 'Pending Operations prompt'. ______________ If the PendingFileRenameOperations error appears , then you must reboot. Upon reboot, L2M file names may change. In that case, exit out of KillBox Run L2MFix Option 1 and post its log in your reply. >>Please wait for new instructions!!<< ______________ If the PendingFileRenameOperations error does not appear, post a fresh HJT log & a fresh L2Mfix option #1 log after you have rebooted __________________ Question - what have you done for the community today? Last edited by sUBs; 02-22-2006 at 05:07 PM.