tetonbob

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

---------------------------------------------------------------------------------------------------

I see you have AVG Anti-Spyware already. Please update it's definitions, and run a scan where I have placed it in this fix.

Run AVG Anti-Spyware

• From the main screen, click on update, then click the Start
  update button.
• After the update finishes (the status bar at the bottom will display "Update
  successful")
• select the "Settings" tab.
• Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
• Under "Reports"
• Select "Automatically generate report after every scan"
• Un-Select "Only if threats were found"
• Exit AVG Anti-Spyware. DO NOT scan yet.

---------------------------------------------------------------------------------------------

Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 only

• Double-click ATF-Cleaner.exe to run the program.
  Under Main choose: Select All
  Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

---------------------------------------------------------------------------------------------------

Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Login on your usual account. Make sure to close any open browsers.

---------------------------------------------------------------------------------------------

Delete the following files/folders:

C:\Program Files\funk fast wave
C:\Program Files\Common Files\Yazzle1122OinAdmin.exe
C:\Program Files\Common Files\mqkz
C:\Documents and Settings\All Users\Application Data\Joy Meet Extra Idol


Please use caution in deleting these next folders. Before deleting, look inside them, and check their properties for creation dates. I've listed them where they were available. These folders emulate legit folder names which may also be present in these locations, and the characters may appear as English or Cyrillic.

If you have any doubts about any of them, do not delete them, but instead, make note of what's inside and post that information in your next reply.


C:\Program Files\Common Files\s?stem<<<created on 2007-02-22 18:55:16
C:\Program Files\Common Files\??stem<<<created on 2007-02-22 18:55:16
C:\Program Files\??sks<<<created on 2007-02-01 06:26:18
C:\Documents and Settings\Dennetts Hardware\Application Data\W?nsxs
C:\Documents and Settings\Dennetts Hardware\Application Data\?dobe<<<Extra care here!!!
C:\Documents and Settings\Dennetts Hardware\Application Data\?pppatch
C:\Documents and Settings\Dennetts Hardware\Application Data\??ppatch
C:\Documents and Settings\Dennetts Hardware\Application Data\?icrosoft<<<Extra care here!!!
C:\Documents and Settings\Dennetts Hardware\Application Data\??sks
C:\Documents and Settings\Dennetts Hardware\Application Data\??stem
C:\Documents and Settings\Dennetts Hardware\Application Data\??stem32
C:\Documents and Settings\Dennetts Hardware\Application Data\?icrosoft<<<Extra care here!!!
C:\Documents and Settings\Dennetts Hardware\Application Data\?asks
C:\Documents and Settings\Dennetts Hardware\Application Data\S?mantec
C:\Documents and Settings\Dennetts Hardware\Application Data\S?mbols
C:\Documents and Settings\Dennetts Hardware\Application Data\F?nts

Run AVG Anti-Spyware with it's updated definitions:(...it's important that all windows must be closed)

• Click Scanner
• Click on the Scan tab
• Click Complete System Scan to begin scanning.
  Once the scan is complete do the following:
• If you have any infections you will prompted, then select "Apply all actions"
• Once finished, click the Save report button, then click Save Report As and save it to your desktop. (make sure to remember where you saved that file, this is important).

Restart in normal mode.

---------------------------------------------------------------------------------------------

Go here and do the BitDefender online virus scan.

• Click "I Agree" to agree to the EULA.
• Allow the ActiveX control to install when prompted.
• Leave the scanning options at default and press "Click here to scan" to begin the scan.
• Please refrain from using the computer until the scan is finished.
• When the scan is finished, click on "Click here to export the scan results"
• Save the report to your desktop then come back here and post it in your next reply.

---------------------------------------------------------------------------------------------------

Run ComboScan once again, and post the log which results.

Please return with logs from:

AVG Anti-Spyware
BitDefender
ComboScan.txt

Let me know if you encountered any problems deleting those folders, and how your system is behaving now, please.