Please print out or copy this page to
Notepad in order to assist you when carrying out the following instructions.
Services
Click Start->Run - type
SERVICES.MSC & then click on the OK button
- Locate the service - Win-Media Service
- Double-click on it to open the Properties dialog.
- Stop the service by using the Stop button.
- Change the Startup type to Disabled & then click on the OK button
- Then start HiJackThis & go to Config>Misc.Tools...> Delete an NT service...
- In the popup box that appears, type in wmedia & then click on the OK button
Next, please reboot your computer in Safe Mode by doing the following:
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
- Instead of Windows loading as normal, a menu should appear
- Select the first option, to run Windows in Safe Mode.
File and Folder Deletions
Delete the following Files indicated in
RED and Folders indicated in
BLUE if they still exist.
c:\Media\sys\system\config
c:\winnt\system32\search.html
c:\winnt\inf\biini.inf
c:\winnt\win32.dat
c:\program files\FlashTalk
c:\program files\MyWay
C:\Program Files\Dart proxy
C:\Program Files\Win obj rect
C:\WINNT\system32\rmtcfg
C:\Documents and Settings\mangemeer\Desktop\Desktop\SmileyCentralBe taSetup1.1.2.1-2.exe
Reboot to normal mode
Runa new scan with Hijackthis and post the log here. How is the PC running now?