[tampabelle]

Hi Capelli,

Well the rootkit revealer revealed that nothing lurking on your PC.

Download CleanUp.


Run Hijack THis and click scan. The following items need to be fixed -

R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
O4 - HKLM\..\Run: [Inet Delivery] C:\Program Files\Inet Delivery\inetdl_2.exe
O16 - DPF: {41F31718-2B9D-4F76-85E2-DD11BBA99F8D} - http://install.spywa...r2501031120.EXE

Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.

Reboot the PC in Safe Mode.

Locate and delete the file - C:\Program Files\Inet Delivery\inetdl_2.exe

Run CleanUp. Delete all temp files including temporary internet files.

Delete all files in the folder - C:\Windows\Prefetch. Dont delete the folder, just the files inside it.

Please delete the earlier files installed by l2mfix and the download l2mfix.exe.

Reboot the PC in Normal Mode.

Download L2mfix from one of these two locations:

http://www.atribune....oads/l2mfix.exe
http://www.downloads....org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!

[Advertisements]

Hi tampabelle,

Thanks for sticking with me on this.... I have completed the tasks you listed in your last reply.... Here is the log from the new L2mfix step #1 .  report070105.txt   22.31KB   91 downloads

[Capelli]

Hi tampabelle,

Thanks for sticking with me on this.... I have completed the tasks you listed in your last reply.... Here is the log from the new L2mfix step #1 .  report070105.txt   22.31KB   91 downloads

[tampabelle]

Hi Capeilli,

You still have the VX2 infection on your PC !!!! Lets try this, if it doesnt work this time I will figure out another way of doing it !!!!

Close any programs you have open since this step requires a reboot.

From the l2mfix folder on your desktop, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter, then press any key to reboot your computer. After a reboot, your desktop and icons will appear, then disappear (this is normal). L2mfix will continue to scan your computer and when it's finished, notepad will open with a log. Copy the contents of that log and paste it back into this thread, along with a new hijackthis log, and we'll clean up what's left.

IMPORTANT: Do NOT run any other files in the l2mfix folder unless you are asked to do so!

[tampabelle]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.