[Michelle]

Ok not a problem, you do have your desktop background back, though, correct?

I'll be right back.

[Advertisements]

yes my background is back thanx for that

[biggam]

yes my background is back thanx for that

[Michelle]

Ok good.

* Run Killbox.exe.

* Select "Delete on Reboot".

* Copy the file names below to the clipboard by highlighting ALL of them then press CTRL + C

C:\Program Files\Internet Explorer\fdlcdxhl.exe
C:\Program Files\Internet Explorer\rdmsrkkm.exe
C:\WINDOWS\Downloaded Program Files\fdlcdxhl.exe
C:\WINDOWS\Downloaded Program Files\rdmsrkkm.exe
C:\WINDOWS\loadclean.exe
C:\WINDOWS\system32\cmd32.exe
C:\WINDOWS\system32\intronsad.exe
C:\WINDOWS\update13.js

* Return to Killbox, go to the File menu, and choose "Paste from Clipboard".

* Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt. If your computer does not restart automatically, please restart it manually.

After your computer reboots, please do this for me:

Please download ewido security suite

• Install ewido security suite
• Launch ewido, there should be a big E icon on your desktop, double-click it.
• The program will prompt you to update click the OK button
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Click on Start

The update will start and a progress bar will show the updates being installed.

Once the updates are installed do the following:

• Reboot into Safe Mode, you can do this by restarting your computer, then contiunally tapping F8 until a menu appears. Use your up arrow key to highlight Safe Mode, then hit enter. Then, run Ewido.
• Click on scanner
• Make sure the following boxes are checked before scanning:
  • Binder
  • Crypter
  • Archives
• Click on Start Scan
• Let the program scan the machine

While the scan is in progress you will be prompted to clean files, click OK

Once the scan has completed, there will be a button located on the bottom of the screen named Save report

• Click Save report
• Save the report to your desktop

Reboot into normal mode.

I need you to post the log from Ewido, and a new HiJackThis log.

[Michelle]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.