sUBs

Carry out the following tasks in the order as I laid out.


Uninstall this program - strCodec

* * * * * *


Download & launch KillBox v2.0.0.175.exe (it's important that you get version v2.0.0.175)





Select the following option - delete on Reboot
Use your mouse to select all the filenames listed below & then right-click & select Copy

• C:\WINDOWS\system32\mljgecc.dll
  C:\WINDOWS\system32\jkklllm.dll
  C:\WINDOWS\system32\byxussp.dll
  C:\WINDOWS\system32\ljjkkli.dll
  C:\WINDOWS\system32\vtuuutq.dll
  C:\WINDOWS\system32\khffgfg.dll
  C:\WINDOWS\system32\uhvjsul.dll
  C:\WINDOWS\system32\tuvsrsq.dll
  C:\WINDOWS\system32\winbug32.dll
  C:\WINDOWS\system32\hjllm.bak2
  C:\WINDOWS\system32\hjllm.bak1
  C:\WINDOWS\system32\pmnlm.dll
  C:\WINDOWS\system32\ljjkkji.dll
  C:\WINDOWS\system32\wnaspi32.dll

* Go to the File menu, and choose Paste from Clipboard
* Click the RED X button.
* Click Yes at the Delete on Reboot prompt.
* Click Yes at the 'Pending Operations prompt'.

If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run TheKillbox, download and run missingfilesetup.exe. Then try Killbox again.


* * * * * *


On the reboot, delete this folder - C:\Program Files\strCodec


Then, Open notepad and copy and paste next present in the quotebox below in it:
(don't forget to copy and paste REGEDIT4)

Save this as fix.reg Choose to "Save type as - All Files"
It should look like this:
Double click on fix.reg & allow it to merge into the registry


* * * * * *


Next, perform an online scan using Internet Explorer at http://www.kaspersky.com/service?chapter=161739400

Answer Yes, when prompted to install an ActiveX component.

• The program will then begin downloading the latest definition files.
• Once the files have been downloaded click on NEXT
• Locate the Scan Settings button & configure to:
  • Scan using the following Anti-Virus database:
    • Extended
  • Scan Options:
    • Scan Archives
    • Scan Mail Bases
• Click OK & have it scan My Computer
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan


* * * * * * CHECK LIST * * * * * * * * * * * * * * * * * * * * *


In your next post, please include fresh logs from:

1. Fresh Hijackthis log taken just before replying
2. Online scan

Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now