Member Panel

Can you please help me?

Hya Zakksangyl.

Download and install win32delfkil.exe.

http://users.telenet.be/marcvn/tools/win32delfkil.exe

Place it on youre desktop and doubleclick on win32delfkil.exe to install it.
A folder will be placed on youre desktop: win32delfkil.
Close all open windows and programs.
Open the folder win32delfkil and dubbelclick on fix.bat.
Youre computer will reboot.

Then fix these with hjt:


And then please post a new hjt log and the windelf log. (c:\windelf.txt.)

ok i did what you said , but my system didn't reboot. i ran a new log.

sorry i am not sure what i did wrong, but hopefully it will work this time.

Hi! I am so sorry, but i downloaded the wrong hi jack log. Here is the correct one.

There is now an Spysherrif infection present , lets get rid of that aswell:

Show hidden files and folders:


For 98/2000/ME:

1. Double-click the My Computer icon
2. Click on the View menu, click Folder Options
3. Advanced Settings box, under the "Hidden files" folder, click Show all files.
4. If you see a warning message, click Yes.
5. Click Apply.
6. Click OK.

Disable System Restore to prevent re-infection.
(If you have/use it. You can turn it back on when youre PC is clean).

How to disable system restore:


WinME.

1. Click Start > Settings > Control Panel.
2. Double-click the System icon.
3. If the System icon is not visible, click View all Control Panel options to display it.
4. On the Performance tab, click File System.
5. On the Troubleshooting tab check Disable System Restore.
6. Click OK. Click Yes, when you are prompted to restart Windows.

Please download CCleaner



Then please boot in safemode (hit f8 when booting up) and fix this one with hjt:

And manually search for , and delete if present:

C:\winstall.exe
C:\WINDOWS\Web\wallpaper.html
C:\WINDOWS\Web\desktop.html
C:\Windows\Desktop.html
C:\wp.exe
C:\wp.bmp
C:\Program Files\SpySheriff <--- the whole folder
C:\Documents and Settings\username\Start Menu\Programs\SpySheriff <-whole folder
C:\Documents and Settings\username\Application Data\Install.dat

And if you have problems setting youre wallpaper , then download this reg fix: spysheriffdesktopfix , unzip it and dubbel click on it to enter it to the registry:

http://users.telenet.be/marcvn/regfi...desktopfix.zip

Then post a new hjt log to check.