Download Pocket Killbox:
http://www.atribune.org/downloads/KillBox.exe

Start Killbox and place a tick next to [x]delete on reboot.
And press the "all files" button. (just above the yellow triangle)

Copy this list into the windows clipboard:
(highlight the text , and select "copy")


D:\WINNT\Temp\Altnet
C:\Documents and Settings\Brian Youngman\Local Settings\Temp\upd.exe
C:\Documents and Settings\Brian Youngman\Local Settings\Temp\shutdown.exe


Back in Killbox go > file > paste from clipboard,
Click the red highlighted X button and say yes to the prompt, then click OK.

Exit Killbox and restart your PC.

Heh, belive it or not I actually already went thru and deleted those. But just to make sure i tried using Killbox. It gives me the error: PendingFileRenameOperations Registry Data has been removed by External Process! Does that just mean the file doesnt exist, or is something interfering with killbox? I checked the internet and it doesnt work. I had installed Ewido on it too and it says its not protecting my pc, and It wont start protecting when i click on. I tried reinstalling EZArmor av/fw and the AV part didnt install correctly. I hope im not running of things to try....

Lets dig a litle deeper , please post a HijackThis StartupList log:

1. start HijackThis
2. click on 'Config'
3. click on 'Misc Tools'
4. Put a check in 'List also minor sections (full)'
5. click on 'Generate StartupList log'
6. click on 'yes' to make the log
7. Then copy the resulting log to a post here


Then download and run these two apps , and post back what they find: (if anything)

http://www.greatis.com/unhackme.zip

http://www.f-secure.com/blacklight/try.shtml



And lets also do a Kaspersky scan:

http://www.kaspersky.com/service?chapter=161739400

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
The program will launch and then begin downloading the latest definition files:
Once the files have been downloaded click on NEXT

Now click on Scan Settings
In the scan settings make that the following are selected:

Scan using the following Anti-Virus database:
Extended (if available otherwise Standard)

Scan Options:
Scan Archives
Scan Mail Bases

Click OK

Now under select a target to scan:

Select My Computer

This will program will start and scan your system.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected.

Now click on the Save as Text button:
Save the file to your desktop.
Copy and paste that information in your next post please.

There it is. The other two found nothing. And i dont think this found much of anything either.

Attached Files

	re2.txt (3.3 KB, 1 views)
	startuplist.txt (11.5 KB, 1 views)

Looks indeed clean , have you tried resseting youre internet options to default? Go to tools/internet option , and then on the "advanced , security and privacy" taps , select default and press apply.

Nope. Doesnt work. No internet applications work. Also, any antivirus programs i tried installing do not work.

Do you get any error messages or anything when trying to use internet applications , or try to install an AV?



install and run http://www.spywareinfo.com/~merijn/files/startuplist.zip

Press the "file" button , and then "paste to clipboard".
Now make a new text document and copy the info in there , and attach that text document to a post please.


Please download and install the trial version of Webroot SpySweeper (8.3mb)
http://www.webroot.com/shoppingcart/...011&vcode=DT02

When SpySweeper starts, please accept any prompts to update definitions.
Configure it as follows:

From the left pane, click Options
Select the Sweep Options tab & ensure the following are ticked:

*Sweep Memory
*Sweep Registry
*Sweep Cookies
*Sweep All Users accounts
*Do Not Sweep System Restore Folder
*Enable Direct Disk Sweeping
*Sweep contents of compressed files
*Sweep For Rootkits

-After that's done, select Sweep from the left pane & click on the Start button
Allow Spysweeper to reboot your machine to remove the infected files.
After rebooting, launch SpySweeper & select Results from the left pane
Click the 'Session Log' tab & choose Save to File to create a log.
When done , post the log please.