Things are looking better. How is your computer running and has all the functionality been restored? We just need to do a little cleanup here and we should be done.
STEP ONE
[*] Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
[*]Copy the text below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\296b1e43 HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\autoload HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\bm2a582ddf HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\jnskdfmf9eldfd HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntuser HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\rundisabled\\C:\WINDOWS2\System32\kdctn.exe
[*] Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.
[*]Click the red Moveit! button.
[*]A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
[*]Close OTMoveIt2
[/list]If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
STEP TWO
- Make sure you have an Internet Connection.
- Double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
- Click on the CleanUp! button
- A list of tool components used in the Cleanup of malware will be downloaded.
- If your Firewall or Real Time protection attempts to block OtMoveit2 to reach the Internet, please allow the application to do so.
- Click Yes to begin the Cleanup process and remove these components, including this application.
- You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.
STEP THREE
It looks as though you only have Windows XP Service Pack 1 installed on your system. The latest version is Service Pack 3. I highly recommend that you use Windows Update to update your computer or you are at a greater risk for re-infection.
- Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.