Angelfire777
Hi,
Open HijackThis > choose Scan Only > Place a checkmark in the boxes beside these entries in bold.
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
Close your browsers and all open windows except for HijackThis, then click "Fix checked". Exit HijackThis.
_____
Open notepad.
Copy and paste the text inside the Code Box below into Notepad
Choose File > Save As and under "Save as type", choose "All Files".
Type clean.bat in the File name and save it to your desktop.
Locate clean.bat on your Desktop and double-click on it. Tell me what it says.
Post back with a fresh HijackThis log and tell me how's your machine running.
Open HijackThis > choose Scan Only > Place a checkmark in the boxes beside these entries in bold.
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
Close your browsers and all open windows except for HijackThis, then click "Fix checked". Exit HijackThis.
_____
Open notepad.
Copy and paste the text inside the Code Box below into Notepad
Choose File > Save As and under "Save as type", choose "All Files".
Type clean.bat in the File name and save it to your desktop.
@echo off
for %%g in (
C:\WINDOWS\SYSTEM32\afnpafn(2).dll
C:\WINDOWS\SYSTEM32\msfoiaaa.exe
C:\WINDOWS\SYSTEM32\tovtbdrt(2).dll
C:\WINDOWS\SYSTEM32\dvlrkcby.dll.bak
C:\WINDOWS\SYSTEM32\tovtbdrt.dll.bak
C:\WINDOWS\SYSTEM32\vxtkaoph.dll
C:\1671390.*
"C:\Documents and Settings\Bob Parchman\Desktop\[4]-Submit_2007-08-08_102446.39.zip"
"C:\Program Files\Internet Explorer\msimg32.dll"
) do (
attrib -s -h -r %%g
del /s/f/q %%g
if exist %%g echo.%%g >>"%temp%\log.txt"
)>nul 2>&1
for %%g in (
"C:\DOCUME~1\BOBPAR~1\APPLIC~1\eAcceleration"
C:\1671390
C:\QooBox
) do (
attrib -s -h -r %%g
rd /s/q %%g
if exist %%g echo.%%g >>"%temp%\log.txt"
)>nul 2>&1
if exist "%temp%\log.txt" (start notepad "%temp%\log.txt"
) else echo.Deleted Successfully!
echo.
pause
del %0Locate clean.bat on your Desktop and double-click on it. Tell me what it says.
Post back with a fresh HijackThis log and tell me how's your machine running.
