| bricat |
| (HijackThis Helper) |
| Sun Sep 18 2005 08:10 PM |
|
Re: Hijack this log info
|
Welcome to the Webuser forum.
Step 1
Configure Windows to Show all hidden files & folders and ensure you're familiar with rebooting into Safe Mode.
Download SmitRem.zip and save the file to your desktop.
Right click on the file and extract it to it's own folder on the desktop.
Place a shortcut to Panda ActiveScan on your desktop.
If you have not already installed Ad-Aware SE 1.06, follow the download and setup instructions here.
Otherwise, check for updates and download any new reference files before closing the program. We'll use it in Safe Mode later.
Step 2
Next, please reboot your computer in Safe Mode - Very Important !!
Run HJT again and checkmark the boxes next to the following:-
O4 - HKLM\..\Run: [RegSvr32] C:\WINDOWS\SYSTEM\msmsgs.exe
O16 - DPF: {FF3F0F03-0F01-131A-A3F9-08F02B23E0CC} - http://66.117.37.13/dba1865.exe
Close ALL OPEN WINDOWS/BROWSERS and click Fix Checked
Step 3
Open the SmitRem folder and double click the RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.
Step 4
Open Ad-aware and do a full system scan. Remove all it finds.
Step 5
Next go to your Control Panel and click Display | Desktop | Customise Desktop | Website | Uncheck "Security Info" if present.
Remove the check by "View my Active desktop as a web page".
Click OK then Apply and OK.
Reboot back into Windows and click the Panda ActiveScan shortcut, and do a full system scan.
Save the scan log and post it along with a new HijackThis Log in your next reply to THIS thread. Let me know if any problems persist.