sUBs

Go to Start → Control Panel → Add or Remove Programs and uninstall the following programs:

• ViewPoint

Please note any other programs that you dont recognize in that list in your next response


Start HiJackThis & go to Config>Misc.Tools> Delete a file on reboot...

1. In the popup box that appears, copy/paste in:
   • C:\WINDOWS\system32\urtlic.exe
2. Click the Open button.
3. Click YES when prompted to restart your computer.

After the reboot, have HJT fix these:

O4 - HKLM\..\Run: [urtlic] c:\windows\system32\urtlic.exe urtlic
O4 - HKLM\..\Run: [msci] C:\DOCUME~1\Willy\LOCALS~1\Temp\200683132429_mcinf o.exe /


Delete this folder - C:\Program Files\Viewpoint


Perform an online scan with Internet Explorer with Panda ActiveScan

1. Click Scan your PC & a 'pop up' window shall appear. *ensure that your pop up blocker doesn't block it
2. Click Scan Now
3. Enter your e-mail address & click Scan Now ...begins downloading 8 MB Panda's ActiveX controls

Begin the scan by selecting My Computer

• If it finds any malware, it will offer you a report.
• Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
• Click on see report. Then click Save report

Post the contents of the report in your next reply

*You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
*Turn off the real time scanner of any existing antivirus program while performing the online scan


Reboot your machine after the online scan & post fresh copies of the following logs:

1. Hijackthis
2. Combofix
3. Online scan