Member Panel

EBelin

ok here is my new hjt, but one of the things wont delete

joe5 · 06:50 PM

Please Download RKFiles.zip
Create a new folder C:\Antispyware\RKFiles
Extract the contents of RKFiles.zip into the new folder you just created.

Next, Create a new Folder on Desktop. Name that Folder QOOLOGIC
Please download Findqoologic into the new Folder, and then unzip it into the new Folder.

Restart to safe mode. (tap f8 key during bootup)

Open the C:\Antispyware\RKFiles folder Double click on RKFILES.BAT
Give it time to run. this may take a while.
Save the text file it creates.
It should save by default to C:\Log.txt

Next, open the QOOLOGIC Folder and Locate and double-click the Find-Qoologic.bat file to run it.
Wait until a text file opens, post it in a reply to your thread after doing the rest of what follows here.
It'll take a while to run a full scan so please be patient.

Restart into regular Windows mode and post the contents of C:\log.txt and the find-qoologic results.

EBelin

i dont know if i did it right, but this is wat i got ok

joe5

Please download Pocket Killbox:
http://www.atribune.org/downloads/KillBox.exe

Then copy the text in the quote below, and paste it into a blank notepad window.
Save it as fix.reg and in the "save as" type box choose "all files".

Code:

REGEDIT4
 
[-HKEY_CLASSES_ROOT\CLSID\{ae89649b-e7dd-4b71-bafc-15656418f42a}]
[-HKEY_CLASSES_ROOT\CLSID\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}] 
[-HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"winsync"=-
 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9E248641-0E24-4DDB-9A1F-705087832AD6}]

Boot in safemode (hit f8 when booting up)
Then double click the fix.reg file and allow it to merge with the registry.

Start Killbox and place a tick next to [x]delete on reboot.
And press the "all files" button. (just above the yellow triangle)
Copy this list into the windows clipboard:

C:\WINDOWS\SYSTEM32\KVDVDDV.EXE
C:\WINDOWS\SYSTEM32\YQRQCC.EXE
C:\WINDOWS\BELEQQ.DAT
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\PWGW.EXE
C:\WINDOWS\system32\yqrqcc.exe

Back in Killbox go > file > paste from clipboard,
Click the red highlighted X button and say yes to the prompt, then click OK.
Exit Killbox and restart your PC.

Then post a new hjt log please.

EBelin

how do i copy the list into the windows clipboard

joe5

Just click and hold youre left mouse button , drag over the list highlighting it , then rightclick and press copy. Its in the "clipboard" then.

EBelin

umm ok this is wat i got.