Help pls Another"ANTIVIRUS XP 08" sucker! | Thread profile

Hi there, Welcome to GeeksToGo. My name is RatHat, and I will help you get through the process of cleaning the malware from your computer. OK firstly, I need you to print out each post I make so that you can refer to it while we fix your computer. This is because there will be times when you are unable to be online to read my instructions, and I will want you to do ...

( Here you go RatHat........ OMT.txt... File/Folder C:\Program Files\VAV not found. File/Folder C:\WINDOWS\system32\vav.cpl not found. OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07192008_172629 main.txt.... Deckard's System Scanner v20071014.68 Run by Jack on 2008-07-19 17:30:26 Computer is in Normal Mode. , -- System Restore , Successfully created a ...

Jack, You removed Java™ 6 Update 7 which is the latest Java version. This should have been kept. Not to worry though, we can reinstall it later. Run OTMoveIt2 again: Double-click OTMoveIt2.exe to run it. Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy): C:\WINDOWS\...

( Here you go RatHat........ OTM.txt.... C:\WINDOWS\system32\cMoVwGgh.ini2 moved successfully. C:\Program Files\LimeWire moved successfully. C:\Program Files\BitLord\Torrents moved successfully. C:\Program Files\BitLord\rules moved successfully. C:\Program Files\BitLord\lang moved successfully. C:\Program Files\BitLord\Downloads\Sex moved successfully. C:\Program Files\...

How is the machine running now?

everything seem pretty good,will i be able too reinstall limewire....from the programs i uninstalled its the only one i use? jack

I would be very wary of reinstalling Limewire, but it is up to you. Whatever you do, do not download any programs or zip files, as they are very likely going to get you infected again. Now lets see if we can get rid of the Privacy Protection line from HJY. Please visit Windows VBScript Tools to download Registry Search Tool Scroll down the page until you locate ...

REGEDIT4 ; RegSrch.vbs © Bill James ; Registry search results for string "Privacy Protection" 20/07/2008 14:25:38 ; NOTE: This file will be deleted when you close WordPad. ; You must manually save this file to a new location if you want to refer to it again later. ; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these ...

Jack, Lets run another small registry script: Please copy the entire contents of the codebox below into Notepad: Open Notepad Copy the contents of the codebox below using CTRL C CODE REGEDIT4 [HKEY_USERS\S-1-5-21-1220945662-839522115-20625366 16-1003\Software\Microsoft\Internet Explorer\Desktop\Components\0] "FriendlyName"=- Now return to Notepad and use CTRL...

( here u go m8... Deckard's System Scanner v20071014.68 Run by Jack on 2008-07-20 15:25:48 Computer is in Normal Mode. , -- HijackThis \(run as Jack.exe\) , Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:25:55, on 20/07/2008 Platform: Windows XP SP2 \(WinNT 5.01.2600\) MSIE: Internet Explorer v6.00 SP2 \(6.00.2900.2180\) Boot mode: Normal Running processes: C...