By: lab mama

lab mama — Fri, 18 Sep 2009 05:13:01 +0000

Try this:
Download CWShredder from here: http://www.bleepingcomputer.com/files/cw… unzip it, and save it on the Desktop.
**Do not run this file yet
Download Smitfraudfix from http://siri.geekstogo.com/SmitfraudFix.p…
Copy and follow the page instructions
**Do not run this file yet
Download and install AVG Anti-Spyware from http://free.grisoft.com/doc/20/lng/us/tp… –
**Do not run this file yet…update it:
Double-click the icon on Desktop to launch AVGAS
You will need to update AVGAS to the latest definition files.
- On the top of the main screen click Shield
- Click the word active to change it to inactive
- On the top of the main screen click Update.
Then click on Start Update. The update will start and a progress bar will show the updates being installed.
When you have finished updating, EXIT AVGAS.
Download and run CrapCleaner from http://www.ccleaner.com/
Note: in CCleaner: go to Uncheck “Only delete files in Windows Temp folders older than 48 hours”).
Set your system to show all files.
Run CWShredder.
Run SmitFraudFix Option #1 (Search). Do not run any other option until you are asked to.
Press Control-Alt-Del to enter the Task Manager.
Click on the Processes tab and end the following process if still active:
svhost.exe (NOTE THE SPELLING. Do not end svchost.exe, which is legit !)
Exit the Task Manager when finished.
Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake:
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = c:secure32.html
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = c:secure32.html
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = c:secure32.html
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = c:secure32.html
F2 – REG:system.ini: Shell=Explorer.exe svhost.exe
O4 – HKLM..Run: [AutoSys] C:WINDOWSsystem32autosys.exe
O4 – HKCU..Run: [TaskManager] C:WINDOWSTaskMgr.exe
Click on Fix Checked when finished and exit HijackThis.
Reboot into Safe Mode(Restart the computer and repeatedly press F8 until you are given a boot screen with SafeMode as an option).
Using Windows Explorer, locate the following files and delete them:
C:secure32.html
C:WINDOWSsystem32svhost.exe Warning ! Do NOT delete the legit SVChost.exe file !
C:WINDOWSsystem32autosys.exe
C:WINDOWSTaskMgr.exe ******WARNING!! DO NOT delete the legit C:windowssystem32taskmgr.exe file! The bad one is in the c:windows folder
Exit Explorer, but do not reboot.
Run AVG Anti-Spyware.
- Click Scanner
- Click on the Scan tab
- Click Complete System Scan to begin scanning.
When the scan is complete click Recommended Action and change it to Quarantine, then click Apply all actions
Once finished, click the Save report button, then click Save Report As. This will create a text file.
Make sure you know where to find this file again.
Restart in Normal Mode.
Check log files to ensure that all files have been cleaned.
Hope this helps!!

Comments on: Msvcrl.dll Not Found/can’t Access Internet-need Help…?

By: lab mama