Open notepad and copy/paste the text in the quotebox below into it:
Quote:
@echo off
sc stop MsaSvc
sc stop RpcPatch
sc stop RpcTftpd
sc stop Windows Apache Service
sc delete MsaSvc
sc delete RpcPatch
sc delete RpcTftpd
sc delete Windows Apache Service
exit
|
Save this as
fix.bat Choose to "Save type as - All Files"
Double click on fix.bat & allow it to run
Then REBOOT! your system.
Open Windows Explorer and delete the following highlighted file/s
Also delete the following red folder/sif still present.
C:\WINDOWS\System32\
vpgvkoua.dll
C:\WINDOWS\System32\
msasvc.exe
C:\WINDOWS\System32\
dxclib303562752.dll
C:\WINDOWS\System32\wins\
DLLHOST.EXE
C:\WINDOWS\System32\wins\
svchost.exe
C:\WINDOWS\
wpablin.exe
C:\WINDOWS\System32\
tccpip.exe
C:\Program Files\
DeluxeCommunications
C:\PROGRAM FILES\
MYWEBSEARCH
Reboot.....
Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~2\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\System32\vpgvkoua.dll",setvm
O20 - AppInit_DLLs: dxclib303562752.dll
O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\System32\msasvc.exe (file missing)
O23 - Service: WINS Client (RpcPatch) - Unknown owner - C:\WINDOWS\System32\wins\DLLHOST.EXE (file missing)
O23 - Service: Network Connections Sharing (RpcTftpd) - Unknown owner - C:\WINDOWS\System32\wins\svchost.exe (file missing)
O23 - Service: TCP and UDP Supp0rt - Unknown owner - C:\WINDOWS\System32\tccpip.exe (file missing)
O23 - Service: Microsoft Apache for Windows (Windows Apache Service) - Unknown owner - C:\WINDOWS\wpablin.exe (file missing)
Reboot and post a new HJT log...