[Ryan]

You will want to print out these instructions, or save them to notepad or another word processor so that you can refer to them

• First, please double-click Killbox.exe to run it.
  • Select:
    • Delete on Reboot
    • then Click on the All Files button.
  • Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
    
    

    "C:\Documents and Settings\All Users\Documenti\setup.exe"
    "C:\VundoFix Backups\"
    "D:\EMULE INCOMING\"
    "D:\PROGRAMMI GIOCHI\x fare siti\Macromedia Studio 8 Full Edition (Dreamweaver 8, Flash Pro 8, Fireworks 8, Contribute 3, Flashpaper 2, Coldfusion Mx 7 Developer Edition, Freehand Mx 11.0.2, Captivate).rar"
    "D:\PROGRAMMI GIOCHI\XPCSpy Pro 2.58 CRACK + SERIAL KEYGEN.exe"
    "D:\PROGRAMMI GIOCHI\XPCSpy Pro 2.6 CRACK ACTIVATOR.exe"
    "D:\PROGRAMMI GIOCHI\high stealth keylogger invisible and all lower Versions Crack & KeyGen.exe"

  • Return to Killbox, go to the File menu, and choose Paste from Clipboard.
  • Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).
  If your computer does not restart automatically, please restart it manually.
  
  =====
  =====
  
• Next, please download ATF Cleaner by Atribune.
  This program is for XP and Windows 2000 onlyClose all Internet Explorer, Firefox, and Opera windows before continuing.
  
  Double-click ATF-Cleaner.exe to run the program.
  Under Main choose: Select All
  Click the Empty Selected button.
  If you use Firefox browserClick Firefox at the top and choose: Select All
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  If you use Opera browserClick Opera at the top and choose: Select All
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  Click Exit on the Main menu to close the program.
  For Technical Support, double-click the e-mail address located at the bottom of each menu.
  
  =====
  =====
  
• Thirdly, download ComboFix.exe using either of these links:
  
  BleepingComputer
  
  Techsupportforum.com
  
  Double click on combofix.exe & follow the prompts to allow the tool to run.
  
  When it has finished, it will produce a log for you. Post that log & a fresh HJT log in your next reply
  
  Note:
  Do not mouseclick combofix's window while it's running. That may cause it to stall

-Ryan

[Advertisements]

but if i delete these:

C:\Documents and Settings\All Users\Documenti\setup.exe"
"C:\VundoFix Backups\"
"D:\EMULE INCOMING\"
"D:\PROGRAMMI GIOCHI\x fare siti\Macromedia Studio 8 Full Edition (Dreamweaver 8, Flash Pro 8, Fireworks 8, Contribute 3, Flashpaper 2, Coldfusion Mx 7 Developer Edition, Freehand Mx 11.0.2, Captivate).rar"
"D:\PROGRAMMI GIOCHI\XPCSpy Pro 2.58 CRACK + SERIAL KEYGEN.exe"
"D:\PROGRAMMI GIOCHI\XPCSpy Pro 2.6 CRACK ACTIVATOR.exe"
"D:\PROGRAMMI GIOCHI\high stealth keylogger invisible and all lower Versions Crack & KeyGen.exe


i delete all the games and music and files i saved with emule!

[MedusAmon]

but if i delete these:

C:\Documents and Settings\All Users\Documenti\setup.exe"
"C:\VundoFix Backups\"
"D:\EMULE INCOMING\"
"D:\PROGRAMMI GIOCHI\x fare siti\Macromedia Studio 8 Full Edition (Dreamweaver 8, Flash Pro 8, Fireworks 8, Contribute 3, Flashpaper 2, Coldfusion Mx 7 Developer Edition, Freehand Mx 11.0.2, Captivate).rar"
"D:\PROGRAMMI GIOCHI\XPCSpy Pro 2.58 CRACK + SERIAL KEYGEN.exe"
"D:\PROGRAMMI GIOCHI\XPCSpy Pro 2.6 CRACK ACTIVATOR.exe"
"D:\PROGRAMMI GIOCHI\high stealth keylogger invisible and all lower Versions Crack & KeyGen.exe


i delete all the games and music and files i saved with emule!

[Ryan]

Many files in that folder are infected. I suggest you back up any original work in that folder, and then follow the killbox instructions. Also, you should uninstall emule, as many of the files one gets from there are infected (and copyrighted)

-Ryan

[MedusAmon]

ok i'll try then!
thanx