Please download MWAV scanner from link 6. Save it to Desktop:
http://www.msspl.co.in/products/mwav/mwav.asp
Disconnect from the net.
Run the mwav scanner:
Put a checkmark in:
Memory, Startup folders, drive, Registry, System folders and Services.
And:
All local drives og Scan all files
Push: Scan Button
This scan can take quite a while to run with many applications installed.
If it finds infected files in system restore, a Txt file will popup, close it.
When the scan is completed, allow it to reboot. Otherwise do it manually.
Your system will take longer that normal to restart as mwav scanner will be running.
Reconnect to the net.
Download and install DrWebCureit:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
http://spywareinfo.dk/download/drweb-cureit.exe
Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how
HERE.
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how
HERE.
Doubleclick the "drweb-cureit.exe" and click "ok" in the prompt window that will open , asking "start the express scan now".
It will first make a quick scan of your system, let it clean what it find, and when it says "done"
Click on the green screwdriver-
Actions Tab- Adware-Dialers-Riskware-Hacktools, use dropdown menu and select -Delete
Click on the drive(s) you want to scan . A red dot will mark the selected drive(s) . Then hit the green arrow in lower right corner It will now scan your drive(s), say yes to all
After the scan, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot. Rehide your protected OS files.
Attach the DrWeb.csv log as well as a fresh HJT log.
Regards Howard
This thread is for the use of havoc123123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.