suebaby41

You may want to print this page. Make sure to work through the fixes in the order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

You have a PurityScan infection. Please follow the following instructions to remove it.

Step 1

First install MVPS HOSTS: <--This kills it!

• Please download hosts.zip
• Click Save, this will save hosts.zip to your Desktop.
• From your Desktop right-click (hosts.zip) and select Extract All from the menu.
• Click Next, click Next, select the option:Show Extracted files
• Click Finish. This will open the newly created hosts folder on your Desktop.
• Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine. Note: if you are prompted by one of your Security programs about the batch file (mvps.bat) allow it to run. If you are prompted by a Security program about changes to the HOSTS file, allow them. This should only occur at the time you are updating the HOSTS file. At any other time, prompts about changes should be investigated!
• If needed, Tutorial on how to install MVPS HOSTS.
• Please read Blocking Unwanted Parasites with a Hosts File.

Please note that a large HOSTS file (over 135 kb) may slow down the machine. This only occurs in W2K and XP.

To fix this:

• Go to Start > Run. Type services.msc
• Scroll down to DNS Client,
• Right-click and select: Properties
• Click the drop-down arrow for Startup type
• Select: Manual, click Apply > OK and restart.

Editor's Note: The above instructions are intended for a single (home-user) PC. If your machine is part of a Domain, check with your IT Dept. before applying this work-around. This especially applies to Laptop users who travel or bring their machines home. Make sure to reset the Service (if needed) prior to connecting (reboot required) to your work Domain.

Step 2

Look in your Control Panel > Add/Remove Programs for any of these and uninstall them:

• Oin
  Yazzle by Oin
  Purityscan by Oin
  Snowballwars by Oin
  or anything similar with Oin or Outerinfo in it.
  Zolero
  Tizzletalk
  MediaTickets
  Cowabanga
  and any other programs you didn't install or don't recognize - if you're not sure, please ask first

If none listed, download and run the OiUninstaller. Please check this Tutorial for the uninstaller for instructions on how to download, install and use the OiUninstaller.

Step 3

1. Please download ComboFix.
2. Double click combofix.exe & follow the prompts.
3. A window will open with a warning. Type [b]Y[/b (and Enter) to start the fix.
4. The scan will temporarily disable your desktop, and if interrupted, may leave your desktop disabled. If this occurs, please reboot to restore the desktop.
5. Caution - do not touch your mouse/keyboard until the scan has completed. That may cause it to stall.
6. When finished, ComboFix will produce a log for you and will automatically save the log file to C:\combofix.txt.
7. ComboFix will create a folder called QooBox in C: (C:\QooBox). It will contain any folders that were quarantined. When you are done you can delete this folder - QooBox.

Please post:

• The two text files, main.txt and extra.txt produced by theDeckard's System Scanner (formerly Comboscan)
• The log from ComboFix
• A new HijackThis log.

Thanks.