(Note...we have noticed recently some CWS variants are harder to remove unless the shredder is run in Safe Mode...hit F8 while booting to enter Safe Mode and run the shredder.)
After cleaning with the shredder in Safe Mode do this:
Download and run these two programs (Spybot S&D and Adaware). Use Spybot first. Follow the directions completely at:
Reboot if asked by either program and let it complete any cleanup. Then reboot a final time after running both and run Windows Disk Cleanup: Start/Run/ type: cleanmgr
I select all the junk to be deleted here.
Then reboot and make a new C:\HJT folder. Your present folder is a bad place to run Hijackthis as backup logs will be in a precarious location for safety. Follow my directions here for relocating your Hijackthis file:
Texruss
3.4K Posts
0
April 19th, 2004 19:00
Quite a few parasites.
Download CW Shredder 1.56.2 at:
http://www.zerosrealm.com/downloads.php
Read running directions here:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=47
At bleepingcomputer.com start at the section that says:
Step 2: Starting CWShredder
(Note...we have noticed recently some CWS variants are harder to remove unless the shredder is run in Safe Mode...hit F8 while booting to enter Safe Mode and run the shredder.)
After cleaning with the shredder in Safe Mode do this:
Download and run these two programs (Spybot S&D and Adaware). Use Spybot first. Follow the directions completely at:
http://www.cjwd.demon.co.uk/spybot-adaware.html
Reboot if asked by either program and let it complete any cleanup. Then reboot a final time after running both and run Windows Disk Cleanup: Start/Run/ type: cleanmgr
I select all the junk to be deleted here.
Then reboot and make a new C:\HJT folder. Your present folder is a bad place to run Hijackthis as backup logs will be in a precarious location for safety. Follow my directions here for relocating your Hijackthis file:
http://russelltexas.com/spywareinfo/createhjtfolder.htm
Post back with a new log as a reply to this message (stay in this message posting thread for continuity).
HTH,
Texruss