Download
KillBox http://www.greyknight17.com/spy/KillBox.exe.
Via Add/Remove, uninstall, if present:
MySearch
Zeno
Run KillBox and check the box that says '
End Explorer Shell While Killing File'. Next click on '
Delete on Reboot'. For each of the following files below, check the box that says '
Unregister .dll Before Deleting' if it's not grayed out. Copy and paste each of the following into KillBox (hitting the X button for each file -
Choose YES when informs you the file will be deleted on Reboot.
Choose NO when it asks if you want to reboot):
C:\WINDOWS\launcher.exe
C:\WINDOWS\winsysupd91.dat
C:\PROGRAM FILES\MySearch
C:\PROGRAM FILES\Network Monitor
C:\PROGRAM FILES\COMMON FILES\VCClient
C:\WINDOWS\SYSTEM32\SBUtils
C:\Program Files\Support.com\bin\tgcmd.exe
C:\RECYCLER\S-1-5-21-1164127803-1809399719-1542849698-1635
C:\WINDOWS\??mantec
Using Ewido, you may want to resotre these files:
C:\Program Files\ORL\VNC\VNCHOOKS.DLL
C:\WINDOWS\system32\PLSRemote.exe - I believe your network administrator requires them.
Once you're done. Please re-run the online virus scan.
Also.
Download
L2MFix - Double click L2mfix.exe & answer Yes when prompted. Then click the Install button to extract the files to a newly created folder named - L2mfix
Double click L2mfix.bat
Select
option #1 - Run Find Log - by typing
1
This will scan your computer and it may appear as if nothing is happening for a period of few minutes. When it has finished, you will be presented with a log. Copy the contents of that log and paste it into this thread.
If you receive an error - \system32\Autoexec.nt is not suitable for running MS-Dos applications, you will need to visit this website to download additional files.
IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!