Welcome to the BleepingComputer HijackThis Logs and Analysis forum kentben
You first need to download all the programs/files below on another pc if necessary,save them to floppy disk/flash drive or whatever means you have.
Install the files onto the problem pc,then follow the running instructions below:
Download Killbox by Option^Explicit:http://download.bleepingcomputer.com/spyware/KillBox.zip
Save it to your desktop.
Please double-click Killbox.exe to run it.
Select: 'Delete on Reboot'.
Then Click on the 'All Files' button.
Please copy ALL
the file paths inside the quote box below to the clipboard by highlighting ALL
of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
Return to Killbox,go to the File menu,and choose 'Paste from Clipboard'.
Click the red-and-white Delete File button.
Click 'Yes' at the 'Delete on Reboot' prompt.
Click OK at any 'PendingFileRenameOperations' prompt.If your computer does not restart automatically,please restart it manually.
After rebooting, open up Killbox again.
Click 'File'>'Logs'>'Actions History Log'.Post this log in your next reply.
Please download VundoFix.exe
to your desktop.
to run it.
When VundoFix re-opens,click the "Scan for Vundo" button.
Once it's done scanning,click the "Remove Vundo" button.
You will receive a prompt asking if you want to remove the files, click "YES".
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed,it will prompt that it will reboot your computer,click "OK".Post the contents of C:\vundofix.txt into your next reply.
It is possible that VundoFix encountered a file it could not remove.
In this case,VundoFix will run on reboot,simply follow the above instructions starting from "Click the Scan for Vundo button.
" when VundoFix appears at reboot.
Please download Combofix
and save to your desktop:http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exeNote:
It is important that it is saved directly to your desktop
Close any open browsers.
Double click on combofix.exe and follow the prompts.
When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note:
Do not mouseclick combofix's window whilst it's running.
That may cause the program to freeze/hang. Also post a new Hijackthis log please.*Note*
If you're still not able to access the internet after doing the above,try the following:
Click on Start/Run,type CMD
then press Ok.
At the Command Prompt copy and paste the following bold text below,then press Enter.NETSH WINSOCK RESET
Then type EXIT
press Enter again,then restart your pc.
Edited by RichieUK, 08 June 2007 - 08:31 AM.