Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.
Download Killbox here: http://www.downloads...org/KillBox.exe and put it on your desktop
Open Killbox
Check the following boxes:
Standard File Kill
End Explorer Shell While Killing file
Copy & paste the full path of the file below into the Killbox topmost box.
C:\WINDOWS\Nail.exe
With the full path to the file name in the topmost textbox, Click the Red X ...and for the confirmation message that will appear, you will need to click Yes
The file may not delete
If the file isn't deleted, use killbox to delete it as follows:
Open Killbox
Check the following boxes:
Delete on Reboot
With the full path to the file name in the topmost textbox. Click the Red X ...and for the confirmation message that will appear, you will need to click Yes
I can't. I get this:
PendingFileNameOperations Registry Data has been Removed by External Process!
A second message will ask to Reboot now? you will need to click Yes
Note: Killbox will let you know if the file does not exist.
After the reboot scan with hijackthis and fix the following if they are still listed
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
Reboot and Post a new hijackthis log.
Note:You may have to repeat the above procedures a couple of times before being successfull. Nail is a hard nut to crack.
Regards,
Trevuren
McAfee seems to be interfering every step along the way. Anything I can/should do?