View Single Post
Old 04-21-2006, 02:19 PM   #16 (permalink)
Hustler24
Analyst, Security Team
 
Join Date: Mar 2005
Posts: 890
OS: Windows XP Home


Download LQfix.exe and place it on your desktop.
  • Doubleclick LQfix.exe and click install.
  • Leave the default settings. If you change them, the fix will fail.
  • Make sure 'Launch LQfix' is checked. After clicking finish in the install, the fix will start.
  • Follow the prompts on the screen.
  • Your system will reboot afterwards.
  • Please be patient after reboot, because there is a script running in the background

Please download FixSSK.reg.

Double click it when it is downloaded and answer Yes to merge it with your registry.


----------------------

Click Start > Run and type:

regsvr32 /u occache.dll


----------------------


Please delete the following files/folders:

C:\WINDOWS\SYSTEM32\csloa.dll
C:\WINDOWS\system32\msehek.dll
C:\WINDOWS\system32\msfdje.gif

C:\WINDOWS\Downloaded Program Files\pdfrpt00.dll


----------------------


Click Start > Run and type:

regsvr32 occache.dll



---------------------


Perform an online scan with Internet Explorer with

Kaspersky WebScanner

Next Click on Launch Kaspersky Anti-Virus Web Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will then begin downloading the latest definition files.
  • Once the files have been downloaded click on NEXT
  • Locate the Scan Settings button & configure to:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK & have it scan My Computer
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
* Turn off the real time scanner of any existing antivirus program while performing the online scan


Post the Kaspersky log and a new Hijack This log here.

Last edited by Hustler24; 04-21-2006 at 02:21 PM.
Hustler24 is offline