Ried

Hi Radja,

Please copy these instructions to Notepad and save it to your desktop for reference.

-----------------------------

Click Start >> Run - type SYSDM.CPL & press Enter
* Select the System Restore Tab
* Tick on the checkbox - "Turn off System Restore on all drives"
Click Apply
* Then untick the same checkbox & click OK

-----------------------------

Please download AproposFix from here:
http://swandog46.geekstogo.com/aproposfix.exe

Save it to your desktop but do NOT run it yet.

-----------------------------

Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

-----------------------------

Go to My Computer->Tools->Folder Options->View tab:
* Under the Hidden files and folders heading:
* select Show hidden files and folders.
* Uncheck Hide protected operating system files (recommended) option.
*Also, make sure there is no checkmark beside Hide file extensions for known file types.
* Click OK.

-----------------------------

Please disable Microsoft AntiSpyware, as it may hinder the removal of some entries. You can re-enable it after you're clean.

• Right click the Microsoft AntiSpyware icon located in the system tray
• Click on Security Agents Status (Enabled)
• Click on Disable Real-time Protection

-----------------------------

Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

-----------------------------

Delete the following files and folders if they still exist:

c:\winnt\system32\fiz1
c:\keys.ini
C:\Documents and Settings\Administrator\My Documents\Data
C:\Documents and Settings\Default User\My Documents\Data

-----------------------------

Go to Start->Run and type in regedit and hit OK. Go to File->Export and save the registry somewhere as a backup. Close the Registry Editor now.

Go to Start->Run and type in notepad and hit OK. Then copy and paste the following bolded text into Notepad:

REGEDIT4

[-hkey_current_user\software\Fun Web Products]

[-hkey_classes_root\clsid\{147A976F-EEE1-4377-8EA7-4716E4CDD239}]

Save the file as "delete.reg" . **Make sure to save it with the quotes. Close Notepad.

Double click on the delete.reg file and choose Yes to merge/add it to the registry. You may delete the file afterwards.

-----------------------------

Reboot into Normal Mode.

-----------------------------

Run another online scan at Panda and post the results here along with the entire contents of the log.txt file in the aproposfix folder.

How is your system behaving now?