Hi,
Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 only
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
=============================================
If you use Firefox Browser
Click Firefox at the top and choose: Select All
Click the
Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
=============================================
If you use Opera browser
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
=============================================
Download KillBox from here:---Please download TheKillbox by Option^Explicit.
from here:
http://downloads.subratam.org/KillBox.zip
or here:
http://download.broadbandmedic.com/
or here:
http://www.bleepingcomputer.com/file...re/KillBox.zip
Unzip it to the desktop but do NOT run it yet.
1) Open up kill box now.
2) Select "Delete on Reboot".
3) Open the text file with these instructions in it, and copy the file names below to the clipboard by highlighting them and pressing Control-C:
C:\Documents and Settings\elliot\Application Data\MetaJoyFive\ARMYNOUN.exe
C:\Program Files\Windows Media Player\wmplayer.exe.tmp
C:\WINDOWS\help_dcc.dll
C:\WINDOWS\inf\biini.inf
C:\WINDOWS\system32\gdnp.dll
C:\WINDOWS\system32\NLNP!3.exe
C:\WINDOWS\system32\NLNP13.dll
C:\WINDOWS\system32\winnet.ini
F:\My Documents\Other Things\toolbar_uninstall.exe
F:\My Documents\Other Things\unorganised stuff\stuff from oldie\Other Things\Crime\1\PWDUMP.EXE
F:\My Documents\Other Things\unorganised stuff\stuff from oldie\Other Things\Crime\l0phtcrack.zip[PWDUMP.EXE]
F:\My Documents\Other Things\unorganised stuff\stuff from oldie\Other Things\Crime\l0phtcrack.zip/LC_CLI.EXE -> Not-A-Virus.PSWTool.Win32.Lopht.100
F:\My Documents\Other Things\unorganised stuff\stuff from oldie\Other Things\Crime\l0phtcrack.zip/lc_gui.exe
4) Return to Killbox, go to the File menu, and choose "Paste from Clipboard".
5) Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.
After that reboot and....
Open Hijackthis, click "Open the Misc Tools section"
Next to "Generate StartupList log", place a check next to "List also minor sections" (full) and "List empty sections (complete).
Then click "Generate StartupList log"
Click "Yes" to the box that pops-up.
Then copy and paste the notepad text that appears in this log back in this topic for review.