Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Still can't get rid of "The Best Offers" [CLOSED]


  • This topic is locked This topic is locked

#16
lissener

lissener

    Member

  • Topic Starter
  • Member
  • PipPip
  • 10 posts

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

Download Killbox here: http://www.downloads...org/KillBox.exe and put it on your desktop

Open Killbox

Check the following boxes:

Standard File Kill
End Explorer Shell While Killing file


Copy & paste the full path of the file below into the Killbox topmost box.

C:\WINDOWS\Nail.exe

With the full path to the file name in the topmost textbox, Click the Red X ...and for the confirmation message that will appear, you will need to click Yes

The file may not delete

If the file isn't deleted, use killbox to delete it as follows:

Open Killbox

Check the following boxes:

Delete on Reboot

With the full path to the file name in the topmost textbox. Click the Red X ...and for the confirmation message that will appear, you will need to click Yes


I can't. I get this:

PendingFileNameOperations Registry Data has been Removed by External Process!

A second message will ask to Reboot now? you will need to click Yes
Note: Killbox will let you know if the file does not exist.

After the reboot scan with hijackthis and fix the following if they are still listed

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe

Reboot and Post a new hijackthis log.

Note:You may have to repeat the above procedures a couple of times before being successfull.  Nail is a hard nut to crack.

Regards,

Trevuren

View Post


McAfee seems to be interfering every step along the way. Anything I can/should do?
  • 0

Advertisements


#17
Trevuren

Trevuren

    Old Dog

  • Retired Staff
  • 18,699 posts
1. UNPLUG (physically) from the internet

2. DISABLE MCAFEE

3. Run the fix

4. When you have obtained the result we are looking for (No Nail in the log),
re-enable McAfee

5,. Reconnect to the internet

6. Post a fresh HJT log


Regards,

Trevuren

  • 0

#18
Trevuren

Trevuren

    Old Dog

  • Retired Staff
  • 18,699 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP