Having Problems With A0005753.exe
Windows Internal Firewall is enabled. c:\windows\ERDNT\cache\srsvc.dll[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . Change the Download signed ActiveX controls to Prompt Change the Download unsigned ActiveX controls to Disable Change the Initialise and script ActiveX controls not marked as safe to Disable Change the After you set this option, Windows recognizes when you are online and uses your Internet connection to find updates on the Windows Update Web site or on the Microsoft Update Web his comment is here
c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe 2004-08-04 . 7435B108B935E42EA92CA94F59C8E717 . 57856 . . [5.1.2600.2180] . . c:\windows\system32\netman.dll 2005-08-22 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . I've managed to delete around 100 or so of them, but 3 severe ones remain and are very determined to stay. Attempting to delete C:\windows\system32\igkuqnkx.ini C:\windows\system32\igkuqnkx.ini Has been deleted! http://www.bleepingcomputer.com/forums/t/330554/redirect-problem-and-firefox-consistently-failing/page-2
c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\svchost.exe[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\powrprof.dll[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . Select all drives. If you are not Trenchdog and have a similar problem, do NOT post here; start your own topicDo not run or start any other programs while these utilities and tools are
Make sure the first box (Inherit from parent...) is checked. Click here to Register a free account now! And this after all my work and a handful of programs telling me it were finally cured. Therefore, in order to prevent the computer from being infected by virus, it is suggested to download the following antivirus to scan the virus completely.
Note the space between the X and the /Uninstall, it needs to be there.:remove tools:Please download OTCleanIt and save it to desktop. Install Ewido Security Suite.2. c:\windows\system32\spoolsv.exe 2005-06-11 . website here Using the site is easy and fun.
C:\WINDOWS\system32\drivers\nmllkn.sys The system cannot find the file specified. !---- User code sections - GMER 1.0.15 ----.text C:\Program Files\Internet Explorer\IEXPLORE.EXE USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 01179315 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation).text C:\Program Files\Internet c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ctfmon.exe[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . When the scan is complete, click OK, then Show Results to view the results. Edited October 23, 2010 by Maurice Naggar Share this post Link to post Share on other sites trenchdog New Member Topic Starter Members 19 posts ID: 3 Posted October
Doubleclick the drweb-cureit.exe file, then on Start and allow to run the express scan This will scan the files currently running in memory and when something is found, click the yes this content A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . Here are the ones I have used thus far: AVG Anti-Virus - While scanning, Grisoft would pop up 'Threat Found!' non-stop during every scan, rounding up about 25 infections caused by Open notepad and copy/paste the text in the quotebox below into it: Quote: File:: C:\Program Files\Online Services\profsyrtymyhd.html C:\WINDOWS\system32\xhyvumhr.exe C:\WINDOWS\system32\msblast.exe Registry:: [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] Source=- [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\windows auto update] Driver:: TnIDriver Save this
Password Site Map Posting Help Register Rules Today's Posts Search Site Map Home Forum Rules Members List Contact Us Community Links Pictures & Albums Members List Search Forums Show Threads Press OK7. c:\windows\ERDNT\cache\scecli.dll[-] 2008-04-14 . weblink Make sure to work through the fixes in the exact order it is mentioned below.
We recommend that you select the Automatic (recommended) Automatically download recommended updates for my computer and install them If you click this setting, click to select the day and time for Whatever is in there can't harm you unless you choose to perform a manual restore. When the scan has finished, look and see if you can click the following icon next to the files found: If so, click it and then click the next icon right
Comodo - 1 Scan, Nothing found Ad-Aware - 1 Scan, Nothing found VundoFix and ComboFix - I used both of them twice and they seem to have eliminated all they can
Attempting to delete C:\windows\system32\xknqukgi.dll C:\windows\system32\xknqukgi.dll Has been deleted! Contents of the 'Scheduled Tasks' folder "2003-01-01 14:41:16 C:\WINDOWS\Tasks\Registration reminder 1.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe "2003-01-12 04:50:00 C:\WINDOWS\Tasks\Registration reminder 2.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe "2003-01-01 16:41:18 C:\WINDOWS\Tasks\Registration reminder 3.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe . ************************************************************************** catchme 0.3.1262 Make sure that at least the first two check boxes are ticked 6. Choose a location for the backup (the default location is C:\WINDOWS\ERDNT which is acceptable).5.