Jump to content

MysteryFCM

Honorary Members
  • Posts

    7,726
  • Joined

Posts posted by MysteryFCM

  1. First, download S!Ri's SmitFraudFix;

    http://archive.mysteryfcm.co.uk/security/a...mitfraudfix.exe

    DO NOT run it yet

    Re-start the computer in Safe Mode and have HiJack This fix the following;

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com/2Q00CPT/0409/bF8.asp

    O2 - BHO: (no name) - {7A8F5B7A-A74F-495E-8A33-DF6226D2BAD8} - C:\Program Files\Video ActiveX Access\iesplg.dll

    O4 - HKLM\..\Run: [spyHunter] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe

    O4 - HKCU\..\Run: [internat.exe] internat.exe

    O4 - HKLM\..\Policies\Explorer\Run: [user32.dll] C:\Program Files\Video ActiveX Access\iesmn.exe

    O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')

    O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')

    O24 - Desktop Component 0: (no name) - C:\Documents and Settings\Administrator\My Documents\isa 43.jpg

    Next, uninstall this (Start > Run and type: appwiz.cpl);

    SpyHunter

    Next, delete the following files/folders (if they still exist);

    C:\Program Files\Video ActiveX Access

    If you do not recognize the filename for this image, delete this one aswell;

    C:\Documents and Settings\Administrator\My Documents\isa 43.jpg

    Next, double click SmitFraudFix.exe

    Press any key to skip the welcome screen, then select option 2

    Finally, re-start your computer and post both the SmitFraudFix log, and a fresh HiJack This log

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.