Hello Zeokage,
Careful with the names of the tools--ComboScan is OK to use. It's
Combofix that has been pulled temporarily.
Please copy this page to
Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
***************************************************
Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:
Ezthemes_WhenUSaveNow_Installer
--------------------------------------------------------------------
Go to Start->Run and type in
regedit and hit OK. Go to File->Export and save the registry somewhere as a backup. Close the Registry Editor now.
Open
notepad and copy/paste the text
in the quotebox below:
(don't forget to copy and paste REGEDIT4)
Quote:
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex]
"WinTools"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ezthemes_WhenUSaveNow_Installer]
|
Save the file as
"delete.reg".
Make sure to save it with the quotes. Choose to "Save type as - All Files"
It should look like this:
Double click on the
delete.reg file and choose
Yes to merge/add it to the registry. You may delete the file afterwards.
--------------------------------------------------------------------
Go to
My Computer->
Tools->
Folder Options->
View tab:
* Under the Hidden files and folders heading:
*
select Show hidden files and folders.
*
Uncheck Hide protected operating system files (recommended) option.
*Also, make sure there is no checkmark beside
Hide file extensions for known file types.
* Click OK.
--------------------------------------------------------------------
Using 'My Computer', navigate to and delete the following
Folder if it still exists.
C:\Program Files\Ezthemes_WhenUSaveNow_Installer
--------------------------------------------------------------------
Please download
SmitfraudFix (by
S!Ri) to your Desktop.
Double-click
smitfraudfix.exe to start the tool.
- Select option #1 - Search by typing 1 and press "Enter"
- A text file will appear which lists infected files (if present).
- Please copy/paste the content of that report into your next reply.
IMPORTANT: Do NOT run option #2 OR any other option until you are directed to do so!
__________________
Member of ASAP since 2005
Member of UNITE since 2006
"It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."