Please download
OTMoveIt2 by OldTimer and save to your Desktop.
- Double-click on OTMoveIt2.exe to launch the program.
- Copy the file(s)/folder(s) paths listed below - highlight everything in the quote box and press CTRL+C or right-click and choose Copy.
QUOTE
[kill explorer]
C:\WINDOWS\system32\ne0kS.exe
C:\WINDOWS\system32\ne0kS.dll.wsf
EmptyTemp
[start explorer]
- Return to OTMoveIt2, right-click in the open text box labeled "Paste List of Files/Folders to be Moved" (under the yellow bar) and choose Paste.
- Click the red MoveIt! button.
- The list will be processed and the results will be displayed in the right-hand pane.
- Highlight everything in the Results window (under the green bar), press CTRL+C or right-click, choose Copy, right-click again and Paste it in your next reply.
- Click Exit when done.
- A log of the results is automatically created and saved to C:\_OTMoveIt\MovedFiles \mmddyyyy_hhmmss.log <- the date/time the tool was run.
--
Note:
If a file or folder cannot be moved immediately you may be asked to reboot your computer in order to finish the move process. If asked to reboot, choose Yes. If not, reboot anyway.QUOTE
Caution: Be careful of what you copy and paste with this tool. OTMoveIt is a powerful program, designed to move highly persistent files and folders. Not following the directions as instructed or using incorrectly could lead to disastrous problems with your operating system.
Please download
MsnCleaner.zip and save to you Desktop.
(in addition to removing infected files, it will remove certain restrictions on your system often disabled by malware.)- Extract (unzip) the file to your desktop. (click here if you're not sure how to do this) but DO NOT use it yet.
- Reboot your computer in "Safe Mode" using the F8. To do this restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A boot menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".
- Double-click MsnCleaner.exe to run the tool.
- Click the "Analyze" button.
- A report will be created after the scan and will be saved to C:\MsnCleaner.txt.
- If it finds an infection, click the "Deleted" button.
- Reboot normally and post the contents of MsnCleaner.txt in your next reply.
Please download
Flash_Disinfector.exe by sUBs and save it to your desktop.
- Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
- The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well. Hold down the Shift key when inserting the drive until Windows detects it to keep autorun.inf from executing if it is present.
- Wait until it has finished scanning and then exit the program.
- Reboot your computer when done.
Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that is plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.