Download the HostsXpert
to your desktop
Open up the HostsXpert
* Make sure that the "make hosts writable?"
button in the upper left corner is enabled.
* Click back up Host files
* then click "Restore MS Hosts File
* close program
You have a suspicious files we need to check.
Go to My Computer
and double-click C
Go to the Tools
menu and select 'Folder Options'
On the 'View'
tab select 'show hidden files and folders'
deselect (uncheck) 'hide protected operating system files (recommended)'
deselect (uncheck) "Hide extensions for known file types.'
Go to next site: http://www.virustotal.com/en/indexf.html
On top you'll find 'Browse'
Click the browse button and browse to next file:C:\WINDOWS\system32\ovzcbs\lsass.exe
Then click the 'Send' button next to it.
This will scan the file. Please be patient.
Save the results in notepad.
Once scanned, copy and paste the results also in your next reply.
I usually enter my email address at virus total so they can send me the scan results. They usually only take a couple minutes to reply.
You can copy/paste the results of scan results here along with a fresh Hijackthis log. Do not attach the results, as it is harder to read that way.
Edited by SifuMike, 15 July 2007 - 09:20 PM.