It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.
Please print out or copy this page to
Notepad in order to assist you when carrying out the following instructions.
---------------------------------------------------------------------------------------------
Download the attached
steve77079.zip file to your desktop. Do not run it just yet.
Close any open browsers.
Double click on the steve77079.zip folder, then double click on the
.reg file within. Click
yes to allow it to merge into your registry.
---------------------------------------------------------------------------------------------
Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Login on your usual account. Make sure to close any open browsers.
---------------------------------------------------------------------------------------------
Go to Start>Run then copy and paste, or type the following, then press Enter:
regsvr32 /u occache.dll
---------------------------------------------------------------------------------------------
Delete the following Files indicated in
RED and Folders indicated in
BLUE if they still exist.
C:\Documents and Settings\Owner\Application Data\tvmcwrd.dll
c:\program files\common files\WinSoftware
C:\Program Files\SpyFerret
c:\windows\kwv2.dat
c:\windows\system32\saieau.dat
C:\WINDOWS\Downloaded Program Files\UWFX5NetInstaller.exe
---------------------------------------------------------------------------------------------
Go to Start>Run then copy and paste, or type the following, then press Enter:
regsvr32 occache.dll
---------------------------------------------------------------------------------------------
Reboot your system in Normal Mode.
---------------------------------------------------------------------------------------------
Please download
SmitfraudFix (by
S!Ri)
Extract the content (a folder named
SmitfraudFix) to your Desktop.
Open the
SmitfraudFix folder and double-click
smitfraudfix.cmd
Select option
#1 -
Search by typing
1 and press
"Enter"
and a text file will appear which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
IMPORTANT: Do NOT run option #2 OR any other option until you are directed to do so!
---------------------------------------------------------------------------------------------
Post here a NEW Comboscan log, and Pandascan log, as described in the previous post.
And please also write here how is your system behaving now.