Tech Support Forum - View Single Post

Ried · 04-17-2006, 05:58 PM

Hello lathspell and welcome,

You may want to print out these instructions for reference, since you will have to restart your computer during the fix. Please make sure you have an ACTIVE internet connection as the tool will need to download additional files and a program.

Please download FixWareout from one of these sites:
http://forums.subratam.org/index.php...=post&id=43811
http://swandog46.geekstogo.com/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is NORMAL. [/i]FixWareOut will produce a logfile, report.txt located within the C:\fixwareout folder

When your system reboots, follow the prompts. Afterwards, HijackThis will launch. Please click Scan, and check the following items:

O17 - HKLM\System\CCS\Services\Tcpip\..\{3E1B1DFE-B663-4198-9D99-45ACC1855F12}: NameServer = 85.255.116.164,85.255.112.226
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA75BC33-2B04-4529-A48C-FA909A1B9673}: NameServer = 85.255.116.164,85.255.112.226
O17 - HKLM\System\CS2\Services\Tcpip\..\{3E1B1DFE-B663-4198-9D99-45ACC1855F12}: NameServer = 85.255.116.164,85.255.112.226

Click Fix Checked. Close HijackThis, and click OK to proceed.

At the end of the fix, you may need to restart your computer again.

-----------------------------------------

Perform an online scan using Internet Explorer with Panda ActiveScan
** click on "Free use ActiveScan" located on the top right hand corner

Click Check Now & a 'pop up' window shall appear. *ensure that your pop up blocker doesn't block it
Enter your e-mail address, country, and state & click Scan Now ...begins downloading 8 MB Panda's ActiveX controls

**A box may appear asking you for a Password, click 'Cancel'
Begin the scan by selecting My Computer

If it finds any malware, it will offer you a report.

Please ignore any entry it finds and wants you to buy the program for removal as we will address this later.
Click on see report. Then click Save report

In your next reply, I will need the following:

fixwareout report.txt
Panda results
New HijackThis log

04-17-2006, 05:58 PM	#2 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,953 OS: WinXP and Vista	Hello lathspell and welcome, You may want to print out these instructions for reference, since you will have to restart your computer during the fix. Please make sure you have an ACTIVE internet connection as the tool will need to download additional files and a program. Please download FixWareout from one of these sites: http://forums.subratam.org/index.php...=post&id=43811 http://swandog46.geekstogo.com/Fixwareout.exe Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is NORMAL. [/i]FixWareOut will produce a logfile, report.txt located within the C:\fixwareout folder When your system reboots, follow the prompts. Afterwards, HijackThis will launch. Please click Scan, and check the following items: O17 - HKLM\System\CCS\Services\Tcpip\..\{3E1B1DFE-B663-4198-9D99-45ACC1855F12}: NameServer = 85.255.116.164,85.255.112.226 O17 - HKLM\System\CCS\Services\Tcpip\..\{AA75BC33-2B04-4529-A48C-FA909A1B9673}: NameServer = 85.255.116.164,85.255.112.226 O17 - HKLM\System\CS2\Services\Tcpip\..\{3E1B1DFE-B663-4198-9D99-45ACC1855F12}: NameServer = 85.255.116.164,85.255.112.226 Click Fix Checked. Close HijackThis, and click OK to proceed. At the end of the fix, you may need to restart your computer again. ----------------------------------------- Perform an online scan using Internet Explorer with Panda ActiveScan click on "Free use ActiveScan" located on the top right hand corner Click Check Now** & a 'pop up' window shall appear. ensure that your pop up blocker doesn't block it Enter your e-mail address, country, and state & click Scan Now* ...begins downloading 8 MB Panda's ActiveX controls A box may appear asking you for a Password, click 'Cancel' Begin the scan by selecting My Computer If it finds any malware, it will offer you a report. Please ignore any entry it finds and wants you to buy the program for removal as we will address this later. Click on see report. Then click Save report** In your next reply, I will need the following: fixwareout report.txt Panda results New HijackThis log __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."