Should I run a repair off the XP CD
Certianly won't hurt...make sure to follow the guidelines
HEREIF you CD doesn't match your install it will let you know.
Open Hijackthis.
click "config"
click "misc tools"
Click "delete a file at reboot"
In the box provided paste in this line then click "open":
D:\WINDOWS\system32\o.vbsYou should be asked if you are sure you want to delete file.
Say yes to delete file and let Hijackthis reboot the machine.
Before you do the repair
Time for some housekeeping- Click START then RUN
- Now type Combofix /u in the runbox and click OK
- When shown the disclaimer, Select "2"
The above procedure will:
- Delete the following:
- ComboFix and its associated files and folders.
- VundoFix backups, if present
- The C:\Deckard folder, if present
- The C:_OtMoveIt folder, if present
- Reset the clock settings.
- Hide file extensions, if required.
- Hide System/Hidden files, if required.
- Reset System Restore.
To reduce the potential for spyware infection in the future, I strongly recommend installing SpywareBlaster and SpyWareGuard and IE/Spyad.
SpywareBlaster and SpywareGuard are by JavaCool and both are free programs. SpywareBlaster will prevent spyware from being installed and consumes no system resources. SpywareGuard offers realtime protection from spyware installation attempts.
IE/Spyad places over 4000 websites and domains in the IE Restricted list which will severely impair attempts to infect your system. It is free.
More info and download is available at links in the following article by TonyKlein
Make
SURE to read
How Did I Get Infected in the First Place??Let me know how you get on w/ the repair....if that doesn't work we'll look for other avenues.
Edited by jwbirdsong, 05 February 2008 - 10:33 PM.