hyperdrive said:
i've successfully reinstalled norton. internet phising protection seems to be working fine.
Good, I thought that would work
Application.NirCmd is still detected by spywaredoctor.
i was wondering if deleting the detected files would solve this, i won't do it yet unless instructed.
What files is it detecting, can you show me the log. Or copy and paste what exactly it is finding.
what about the windows update files, is it ok to update now or wait?
Go ahead and update as soon as possible. These may include some security updates that you have not been receiving because of the infection.
another thing i noticed after all the procedures we've done is that auto-run doesn't work anymore. when i insert a cd or dvd, and connect my external HDD there's no autorun anymore
We can try to change some settings in the registry, but before doing that it is a good idea to backup the registry. So please do these instructions in order, reboot then test the autorun.
Backup your regsitry
First, we need to backup your registry:
Please go to Start > Run
Paste in the following line:
- regedit /e c:\registrybackup.reg
Click OK.
It won't appear to be doing anything, that's normal.
Your mouse pointer may turn to an hour glass for a minute.
Please continue when it no longer has the hour glass.
Making a .reg file
Open notepad and copy and paste the text in the quotebox below in it:
Code:
[b]REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
“AutoRun”=dword:0000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
“allocatecdroms”=”0″
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
“NoDriveTypeAutoRun”=dword:00000091[/b]
Name the file as
Fix.reg
Change the
"Save As" type to
"All Files" and save it on the desktop.
It should look like this:
Double-click on it and when it asks you if you want to merge the contents to the registry, click
yes/ok.
