Win32 Zlob-CW

Status
Not open for further replies.

misswriter

Posts: 23   +0
Hi Howard,

I'm back, again. Seems I have yet another mess. It hasn't even been two weeks since the last problem. :(

I've posted my Ewido log file.

Thanks Kim
 
First, turn off system restore. See HERE for instructions.

Then, download and run the Windows malicious software removal tool from HERE.

Turn system restore back on.

Then, post a fresh HJT log into this thread. See HERE for instructions.

Regards Howard :)
 
Hmmm...I ran the malcious software tool and it found "no malcious software was detected".

It did recommend I install (SP2). Should I do this?

Do you want me to post another HJT file?

Kim
 
Go to add remove programmes in your control panel and uninstall anything to do with(if there).

Viewpoint\Viewpoint Manager

Close control panel.

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

ViewMgr.exe

Close task manager.

Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe

O4 - Global Startup: Digital Line Detect.lnk = ?

O14 - IERESET.INF: START_PAGE_URL=http://home.excite.ca/

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

Other than the above, your HJT log is clean.

Regards Howard :)
 
I did as requested. :)

Thanks again for the help, Howard. So should install (SP2) as long as my system is clean?

Kim
 
misswriter said:
I did as requested. :)

Thanks again for the help, Howard. So should install (SP2) as long as my system is clean?

Kim

Yes that seems like a good idea.

Just make sure you backup your important data first. This is because installing sp2 is a major OS upgrade and can sometimes cause problems. So it`s better to be safe than sorry.

Regards Howard :)

This thread is for the use of misswriter only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
Status
Not open for further replies.
Back