4.8K Posts

December 24th, 2004 23:00

TheGame,

Let's do the following...



Go to Add/Remove programs and remove(uninstall) then following:

SideFind
RemindU

-

Reboot into "Safe Mode".



Now, let's run HiJackThis, then:

1. click " Config..."
2. click " Misc Tools"
3. click " Delete a file on reboot"
4. browse to, then double-click on each of the file(s) below, one at a time:

C:\WINDOWS\Downloaded Program Files\SbCIe028.dll

5. when prompted to " Reboot Now", after selecting each file, select " No"



Now, let's open a command prompt and unregister the dll(s) we're going to remove, by entering the following:

regsvr32 /u SbCIe028.dll

It's ok, if these aren't found.



Run HiJackThis and click " Scan", then check(tick) the following, if present:


O2 - BHO: (no name) - {D714A94F-123A-45CC-8F03-040BCAF82AD6} - C:\WINDOWS\Downloaded Program Files\SbCIe028.dll

O8 - Extra context menu item: RemindU - file://C:\Program Files\UpromiseRemindU\System\Temp\upromise_script0.htm

O9 - Extra button: SideStep - {3E230861-5C87-11D3-A1C6-00105A1B41B8} - C:\WINDOWS\Downloaded Program Files\SbCIe028.dll
O9 - Extra button: RemindU - {16BF42FD-CA0A-4f48-819D-B0343254DD67} - file://C:\Program Files\UpromiseRemindU\System\Temp\upromise_script0.htm (HKCU)

O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} (RdxIE Class) - http://207.188.7.150/029424af2345e3bc0904/netzip/RdxIE.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/091aa37f4e492ae8c701/netzip/RdxIE601.cab
O16 - DPF: {640B39C1-D713-464F-92C3-75BD972B95EE} - http://www.sidestep.com/get/k42037/sb028.cab


Now, with all windows closed except HiJackThis, click " Fix checked".

Reboot your computer normally.



Post back a new log.

Mike.
No Events found!

Top