TechSpot

Win32 Zlob-CW

By misswriter
Jun 15, 2006
  1. Hi Howard,

    I'm back, again. Seems I have yet another mess. It hasn't even been two weeks since the last problem. :(

    I've posted my Ewido log file.

    Thanks Kim
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    First, turn off system restore. See HERE for instructions.

    Then, download and run the Windows malicious software removal tool from HERE.

    Turn system restore back on.

    Then, post a fresh HJT log into this thread. See HERE for instructions.

    Regards Howard :)
     
  3. misswriter

    misswriter TS Rookie Topic Starter Posts: 23

    Hmmm...I ran the malcious software tool and it found "no malcious software was detected".

    It did recommend I install (SP2). Should I do this?

    Do you want me to post another HJT file?

    Kim
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    No. Don`t install sp2 at the moment.

    Yes. Post a fresh HJT log as requested in my above post.

    Regards Howard :)
     
  5. misswriter

    misswriter TS Rookie Topic Starter Posts: 23

    Here's the HJT file.

    Thanks Kim
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Go to add remove programmes in your control panel and uninstall anything to do with(if there).

    Viewpoint\Viewpoint Manager

    Close control panel.

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    ViewMgr.exe

    Close task manager.

    Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

    O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe

    O4 - Global Startup: Digital Line Detect.lnk = ?

    O14 - IERESET.INF: START_PAGE_URL=http://home.excite.ca/

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

    Other than the above, your HJT log is clean.

    Regards Howard :)
     
  7. misswriter

    misswriter TS Rookie Topic Starter Posts: 23

    I did as requested. :)

    Thanks again for the help, Howard. So should install (SP2) as long as my system is clean?

    Kim
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Yes that seems like a good idea.

    Just make sure you backup your important data first. This is because installing sp2 is a major OS upgrade and can sometimes cause problems. So it`s better to be safe than sorry.

    Regards Howard :)

    This thread is for the use of misswriter only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...