Re: Win Tools
From: Lawrence Abrams (grinler-AT=bleepingcomputer.com)
Date: 08/18/04
- Next message: Lawrence Abrams: "Re: VIRUS"
- Previous message: Joan NYC: "Win Tools"
- In reply to: Joan NYC: "Win Tools"
- Next in thread: James: "Re: Win Tools"
- Reply: James: "Re: Win Tools"
- Reply: Joan NYC: "Re: Win Tools"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 18 Aug 2004 14:25:59 -0400
You are going to have to have it manually removed. Automated tools do not
remove this particular infection. Please follow these steps:
Create a directory on your hardrive to save HijackThis.exe. A directory
like c:\hijackthis. If you do not do this, you will not be able to use the
backup/restore features.
Download HijackThis from:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
or here:
http://www.bleepingcomputer.com/files/spyware/hijackthis.zip
Save this file into the directory you made previously and then run the
program named hijackthis.exe. When the program opens click on the Config
button, then click on the Misc Tools button, and click on the Check for
update online button. When it completes checking/applying updates press the
back button.
Now click on the Scan button and when it is finished click on the Save Log
button. A Notepad window will open with the contents of this log. Click on
Edit then click on Select all. Then click on Edit and then Click on Copy.
Create a reply to this post here or register an account and post a message
in the HijackThis Logs forums at http://www.bleepingcomputer.com and right
click in message area and select paste to paste the log into the post.
Someone will reply to you after reading this post. DO NOT fix any entries
unless you understand what you are doing.
To see a tutorial with screenshots on using HijackThis you can click on the
link below:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42
-- Lawrence Abrams http://www.bleepingcomputer.com Source for Original Content, Tutorials, and Support for the beginning computer user. "Joan NYC" <anonymous@discussions.microsoft.com> wrote in message news:848a01c48549$ad0c5570$a501280a@phx.gbl... > Has anyone come up with a way to remove this. > > I looked around before I posted to see if there was a > previous post so I would not be redundant. > > Can't this to go away :) > > Any suggestions would be greatly appreciated. > > Joan
- Next message: Lawrence Abrams: "Re: VIRUS"
- Previous message: Joan NYC: "Win Tools"
- In reply to: Joan NYC: "Win Tools"
- Next in thread: James: "Re: Win Tools"
- Reply: James: "Re: Win Tools"
- Reply: Joan NYC: "Re: Win Tools"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]