View Single Post
Old 02-26-2006, 08:58 PM   #5 (permalink)
Jag11
Analyst, Security Team
 
Jag11's Avatar
 
Join Date: Nov 2005
Location: 127.0.0.1
Posts: 806
OS: Windows XP


Good job. Now let's just clean the leftovers.

==========================================================

Run HijackThis

Please open HJT, click Do a system scan only, and then place a checkmark beside each of these entries:

R3 - Default URLSearchHook is missing


After placing all the checkmarks, close all windows (except HJT), and then hit Fix Checked. When it finishes, exit HJT.

==========================================================

Clear IE's Cookies
  • Open Internet Explorer.
  • Click Tools » Internet Options.
  • Click the Delete Cookies button, then click OK.
  • Then click OK to exit.
==========================================================

Then find and delete these files:
  • C:\WINDOWS\ss3unstl.exe
  • C:\WINDOWS\system32\P2P Networking v1263.cpl
==========================================================

Restart your computer back to Normal again.

==========================================================

Run an online scan at Kaspersky
  • Please go here to run Kaspersky Online Virus Scanner.
  • You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK
  • Now under select a target to scan, select My Computer.
  • This will scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button, and save it to your Desktop.
  • Copy and paste that information in your next post.
==========================================================

Then please post the Kaspersky log along with a new HijackThis log.
__________________

If you think that we helped you in any way, please consider donating to the site.
.
Jag11 is offline