TechSpot

ismini.exe and other threats

By Yasko
Dec 19, 2006
  1. Hello,
    I am a newcommer, but i have prepared my HJT and AVG Antispyware logs according to instructions in topic58138. Please help me with the next steps on. Thanks.
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

    Turn off system restore.(XP/ME only) See how HERE.

    Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.

    Go to add remove programmes in your control panel and uninstall anything to do with(if there).

    WinAntiVirus Pro 2006
    VideoKeyCodec

    Close control panel.

    Reboot into normal mode, turn system restore back on and rehide your protected OS files.Post a fresh HJT log, only after doing the above.

    Regards Howard :wave: :wave:

    This thread is for the use of Yasko only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. Yasko

    Yasko TS Rookie Topic Starter

    New HJT log file

    Thanks for helping Howard,

    I can not find WinAntiVirus Pro 2006 or VideoKeyCodec. Probably i have send you not actual HJT log. Now i am sending the last one.
    Regards
    Yasko
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Ok, now we need to get rid of your hijack. This particular hijack is caused by downloading Xbox games etc.

    The Blacklight programme gets rid of the hijack you have.

    Go and download the Blacklight programme. and follow the instructions exactly.

    Then post a fresh HJT log.

    Regards Howard :)

    This thread is for the use of Yasko only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  5. Yasko

    Yasko TS Rookie Topic Starter

    new Log

    Hi Howard
    This a log file after runung F-Secure blacklight
    Regards
    Yasko
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    Fix all 017 entries.

    Fix all 018-Protocol entries.

    Click on the fix checked button.

    Close HJT and reboot your system.

    Post a fresh HJT log.

    Regards Howard :)

    This thread is for the use of Yasko only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  7. Yasko

    Yasko TS Rookie Topic Starter

    New log

    This is a log file after fixing 017 and 18.

    Regards
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Have HJT fix this inactive entry.

    O3 - Toolbar: Safety Bar - {18668683-731c-48fa-b1b9-ad013748fb00} - (no file)

    Other than that, your HJT log is now clean.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of Yasko only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  9. Yasko

    Yasko TS Rookie Topic Starter

    Thanks

    Thank you very much Howard!


    Regards
    Yasko
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...