View Single Post
Old 06-29-2007, 08:45 PM   #9 (permalink)
Ried
Assistant Manager, TSF Academy; Moderator/Analyst Security Team
 
Ried's Avatar
 
Join Date: Jan 2005
Location: Ohio
Posts: 26,613
OS: WinXP and Vista


Re: Pop-ups, Slowness, Oh My!

Hi Alec,

Your system is still sluggish because we have a bit more to do--we're almost there.

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

Also be sure to carry out the instructions in the sequence listed below.

***************************************************

Open notepad and copy/paste the text in the quotebox below into it:

Quote:
Files::
C:\WINDOWS\awtqqq.dll
C:\WINDOWS\xxywur.dll
C:\WINDOWS\gebbxx.dll
C:\WINDOWS\system32\ddccy.exe
C:\WINDOWS\system32\gebcy.exe
C:\WINDOWS\system32\gebyw.exe
C:\WINDOWS\pmnkih.dll
C:\WINDOWS\system32\mljjk.exe
C:\WINDOWS\vttssp.dll
C:\WINDOWS\system32\pmkhi.exe
C:\WINDOWS\system32\jkhhi.exe
C:\WINDOWS\system32\vturs.exe
C:\WINDOWS\geedeb.dll
C:\WINDOWS\tuvtqo.dll
C:\WINDOWS\vttqpo.dll
C:\WINDOWS\xxxuvs.dll
C:\WINDOWS\mlkklm.dll
C:\WINDOWS\4-efb7bab6499fc415ee93f4097033deae.exe

Registry::
[-hkey_current_user\software\Fun Web Products]
[-hkey_current_user\software\MyWebSearch]
Save this as ComboFix-Do.txt, in the same location as ComboFix.exe




Refering to the picture above, drag ComboFix-Do.txt into ComboFix.exe

Follow the prompts.

When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall


--------------------------------------------------------------------

Open HijackThis and click on 'Do a System Scan Only'. 'Check' the following entry:

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...p=ZNxmk772MFUS

Click 'Fix Checked' and close HijackThis.

--------------------------------------------------------------------

Reboot your system.

--------------------------------------------------------------------

Please run another online scan at Panda and save the results.

--------------------------------------------------------------------

Run a scan with HijackThis and save the log.

--------------------------------------------------------------------

Include the following in your next reply:

C:\ComboFix.txt
Panda results
New HijackThis log


What year was your Symantec Professional Edition? The reason I'm asking is so I can direct you to the proper uninstaller.
__________________

Member of ASAP since 2005
Member of UNITE since 2006

"It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."
Ried is offline