|
Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding.
Please ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this
webpage would not be available when you're carrying out the fix.
IT IS IMPORTANT THAT YOU DON'T MISS A STEP & PERFORM EVERYTHING IN THE RIGHT ORDER.
----------------------------------------
You have a Keygen, Keylogger and Hacktool on your system. Please let me know if you installed these and if you want to keep them,
bearing in mind that they are open invitations for malware to enter your system.
----------------------------------------
Keygen: A keygen (a portmanteau of "key generator") is a small program that will generate a CD key or serial/registration number for a piece of
software or cryptographic algorithm.
Keygens are made available by software cracking groups for free download on various websites dedicated to software piracy.
Keylogger: Keystroke logging (often called keylogging) is a diagnostic used in software development that captures the user's keystrokes.
It can be useful to determine sources of error in computer systems and is sometimes used to measure employee productivity on certain clerical tasks.
Such systems are also highly useful for law enforcement and espionage—for instance, providing a means to obtain passwords or encryption keys and thus
bypassing other security measures. However, keyloggers are widely available on the internet and can be used by anyone for the same purposes.
Hacktool: Any tool that might be used in planning an attack on a system, developing tools for such an attack, or performing it.
----------------------------------------
CLEAN-OUTS
Please delete the files found in these Quarantine folders. Leave the folders intact:
AVG Quarantine
Symantec AntiVirus Corporate Edition\7.5
housecall6.6\Quarantine
----------------------------------------
SAFE MODE RE-BOOT
Please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Use the up arrow key to highlight Safe Mode and press Enter.
5) Login with your usual account. Make sure to close any open browsers.
----------------------------------------
FIXES AND DELETIONS
Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click “Kill process” for each one (If they still exist)
(You must kill them one at a time).
[b]
----------------------------------------
Go into HijackThis>>Open Misc Tools>>Open Uninstall Mnager
Highlight xxx
Click Delete This Entry
----------------------------------------
Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:
----------------------------------------
Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)
O4 - HKLM\..\Run: [Flap coal sign less] C:\Documents and Settings\All Users\Application Data\Proxy Support Flap Coal\Hearteggs.exe
Please remember to close all other windows, including browsers then click Fix checked.
----------------------------------------
UNHIDE HIDDEN FILES
Go to My Computer->Tools->Folder Options->View tab:
* Under the Hidden files and folders heading, select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Also make sure there is no checkmark beside Hide file extensions for known file types
* Click Yes to confirm and then click OK.
----------------------------------------
Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.
P:\Old Comp Files\Downloads\gdivx\GDiVX1.9.5.exe
C:\Documents and Settings\All Users\Application Data\Proxy Support Flap Coal
----------------------------------------
SYSTEM RE-BOOT
Reboot into Normal Mode.
----------------------------------------
FOLLOW-UP
Please return and post these items in the order listed:
A new HJT log run in Normal Mode
Please note: In order to properly see what is on your system, all HJT logs must be run in the normal mode
Please let me know how your system is behaving.
__________________
|