We need to get rid of one of the services running on your machine. To do this, copy (Ctrl +C) and paste (Ctrl +V) the text in the code box below to Notepad.
Code:
@echo off
sc stop Viewpoint Manager Service
sc delete Viewpoint Manager Service
del service.cmd and exit
Save it to your desktop as File name:
service.cmd
Save as type:
All Files
Once done, double click service.cmd to run it. A command window will open briefly, then close. This is quite normal.
Go to add/remove programs and uninstall Viewpoint
Then navigate to and delete C:\program files\Viewpoint
------------------------------------------------------------------------------------
Remove bad HijackThis entries
- Run HijackThis
- Click on the System Scan Only button
- Put a check beside all of the items listed below (if present):
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {5F505979-B759-4A89-B9E0-3C2A17C68D76} - C:\WINDOWS\system32\rqRKBTkK.dll
O2 - BHO: (no name) - {C1D0A6B1-6D9B-4BEF-979D-E86A42056690} - C:\WINDOWS\system32\xxyxYQJY.dll
O2 - BHO: {a9f86cf9-84df-efea-9fa4-b18f19ee924e} - {e429ee91-f81b-4af9-aefe-fd489fc68f9a} - C:\WINDOWS\system32\iruqfr.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [e85e6f77] rundll32.exe "C:\WINDOWS\system32\jtdyfjcj.dll",b
O4 - HKLM\..\Run: [BMeb6d5ceb] Rundll32.exe "C:\WINDOWS\system32\ivjbpcul.dll",s
O4 - HKCU\..\Run: [xInsIDE] C:\Program Files\xInsIDE\xInsIDE.exe
O20 - Winlogon Notify: rqRKBTkK - C:\WINDOWS\SYSTEM32\rqRKBTkK.dll
- Close all open windows and browsers/email, etc...
- Click on the "Fix Checked" button
- When completed, close the application.
--------------------------------------------------------------------------------------
OTMoveit2 by OldTimer
Please
download the
OTMoveIt2 by OldTimer.
- Save it to your desktop.
- Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
- Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
Code:
[b]C:\WINDOWS\system32\rqRKBTkK.dll
C:\WINDOWS\system32\xxyxYQJY.dll
C:\WINDOWS\system32\iruqfr.dll
C:\WINDOWS\system32\jtdyfjcj.dll
C:\WINDOWS\system32\ivjbpcul.dll
C:\Program Files\xInsIDE
C:\WINDOWS\SYSTEM32\rqRKBTkK.dll[/b]
- Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.
- Click the red Moveit! button.
- A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
- Close OTMoveIt2
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose
Yes.
--------------------------------------------------------------------------------------
Please download
VundoFix.exe to your desktop.
- Double-click VundoFix.exe to run it.
- Click the Scan for Vundo button.
- Once it's done scanning, click the Remove Vundo button.
- You will receive a prompt asking if you want to remove the files, click YES
- Once you click yes, your desktop will go blank as it starts removing Vundo.
- When completed, it will prompt that it will reboot your computer, click OK.
- Please attach the C:\vundofix.txt and a new HiJackThis log.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the
Scan for Vundo button." when VundoFix appears at reboot.
-------------------------------------------------------------------------
Malwarebytes' Anti-Malware
- Please download Malwarebytes' Anti-Malware to your desktop.
- Double-click mbam-setup.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to
- Update Malwarebytes' Anti-Malware
- and Launch Malwarebytes' Anti-Malware
- then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select Perform full scan, then click Scan.
- When the scan is complete, click OK, then Show Results to view the results.
- Be sure that everything is checked, and click Remove Selected.
- When completed, a log will open in Notepad. please attach this log with your reply
- If you accidently close it, the log file is saved here and will be named like this:
- C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
---------------------------------------------------------------------------
Run another scan with Hijackthis and attach it here along with:
1) OTMoveit2! log
2) Vundofix log
3) MBAM log
4) The new hjt log