OK you are now clean of Malware so lets move on to boosting general and internet performance
Do the below
Left Drag mouse and Copy for Pasting all text in the box below. Make sure the slider bar goes to bottom from the @ to the end of the second exit.
Then paste to the black screen of an open command prompt. All may not apply so ignore errors.
Code:
@echo off
sc config Alerter start= disabled
sc stop Alerter
sc config AeLookupSvc start= disabled
sc stop AeLookupSvc
sc config ClipBook start= disabled
sc stop ClipBook
sc config Dfs start= disabled
sc stop Dfs
sc config FastUserSwitchingCompatability start= disabled
sc stop FastUserSwitchingCompatability
sc config TrkWks start= disabled
sc stop TrkWks
sc config TrkSvr start= disabled
sc stop TrkSvr
sc config DNSCache start= disabled
sc stop DNSCache
sc config ERSvc start= disabled
sc stop ERSvc
sc config HidServ start= disabled
sc stop HidServ
sc config PolicyAgent start= disabled
sc stop PolicyAgent
sc config CiSvc start= disabled
sc stop CiSvc
sc config IsmServe start= disabled
sc stop IsmServ
sc config kdc start= disabled
sc stop kdc
sc config LicenseService start= disabled
sc stop LicenseService
sc config Messenger start= disabled
sc stop Messenger
sc config Netlogon start= disabled
sc stop Netlogon
sc config NetTcpPortSharing start= disabled
sc stop NetTcpPortSharing
sc config mnmsrvc start= disabled
sc stop mnmsrvc
sc config NetDDE start= disabled
sc stop NetDDE
sc config NetDDEdsdm start= disabled
sc stop NetDDEdsdm
sc config NtLmSsp start= disabled
sc stop NtLmSsp
sc config SysmonLog start= disabled
sc stop SysmonLog
sc config RSVP start= disabled
sc stop RSVP
sc config SSDPSRV start= disabled
sc stop SSDPSRV
sc config upnphost start= disabled
sc stop upnphost
sc config WMPNetworkSvc start= disabled
sc stop WMPNetworkSvc
sc config WmiApSrv start= disabled
sc stop WmiApSrv
sc config WmdmPmSN start= disabled
sc stop WmdmPmSN
sc config RemoteRegistry start= disabled
sc stop RemoteRegistry
sc config RemoteAccess start= disabled
sc stop RemoteAccess
sc config SCardSvr start= disabled
sc stop SCardSvr
sc config TlnSvr start= disabled
sc stop TlnSvr
sc config UPS start= disabled
sc stop UPS
sc config WebClient start= disabled
sc stop WebClient
sc config DNSCache start= disabled
sc stop DNSCache
sc config JavaQuickStarterService start= disabled
sc stop JavaQuickStarterService
sc delete JavaQuickStarterService
attrib -h -s -r /s c:\jqs.*
del /f /q /s c:\jqs.*
sc config RpcSs start= Automatic
sc start RpcSs
sc config RpLocator start= Automatic
sc start RpcLocator
sc config MSIServer start= Automatic
sc start MSIServer
netsh dump >"%USERPROFILE%"\Desktop\savenetwork.txt
netsh interface ip delete arpcache
ipconfig /flushdns
ipconfig /release *
ipconfig /renew *
ipconfig /registerdns
nbtstat -RR
netsh int ip reset
exit
exit
Run CCleaner
http://www.ccleaner.com/download/builds (get SLIM at bottom no Yahoo toolbar)
Run twice or more on Cleanup temps, then on left click Registry then Scan for issues also repeat till clean. You may have this from the 8 Steps.
Run ATF-Cleaner
http://majorgeeks.com/ATF_Cleaner_d4949.html Temp and Registry, repeatedly until no more found.
KCleaner
ftp://ftp2.kcsoftwares.com/kcsoftwa/files/kcleaner.exe
Fantastic cleaner.
(When installing uncheck Relevant Knowledge do not install)
-------------------------------------------------------------------------------------
Start-Programs-Accessories-System Tools-Disk- System Restore and create a new Restore point. Name it "Cleanup at TechSpot".
Then Start-Programs-Accessories-System Tools-Disk Cleanup
Click OK to accept C:
Select all Boxes
Then click More Options
Here click System Restore and OK to "Are you sure" and the OK to Run.
As this runs it clears all but the most recent Restore Point but it does one other thing that can contain infested files and a huge amount of disk space.
It clears what is known as Shadow copies which are used by specialized back up programs.
This is if you have the Volume Shadow Copy running which is the default.
Reboot to see if anything changed!
Mike
