View Single Post
Old 06-18-2006, 06:16 PM   #9 (permalink)
greyknight17
Analyst, Security Team
 
greyknight17's Avatar
 
Join Date: Jul 2004
Location: New York
Posts: 14,331
OS: Windows 98 & Windows XP Home/Pro

My System

Most likely called wuaclt.exe and should be a bad file...but just to be sure:

Go to Start->Run and type in notepad and hit OK. Then copy and paste the following into Notepad:

dir C:\WINDOWS\system32\w?aclt.exe > files.txt
notepad files.txt
del files.txt
del delete.bat


Save the file as "delete.bat". Make sure to save it with the quotes. Double click on it to run it. Post that notepad file here.


Fix these in HijackThis:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)


Delete all the cookie files in these folders:

C:\Documents and Settings\Compaq_Owner\Cookies\
C:\Documents and Settings\Haley\Application Data\Earthlink\6.0\heartbreaker72@earthlink.net\Co okies\


Restart your computer and post a new HijackThis log here.

How is it running so far?
__________________
Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it.

greyknight17 is offline