View Single Post - Unknown virus or trojan HijackThis log file

edifier · 11-26-2006, 06:33 AM

Run 'HJT', select 'Misc.Tools/Delete a File on Reboot"

Navigate to - C:\WINDOWS\system32\drvwot.dll

Click open.Okay.
Hijackthis will tell you that this file will be deleted on next reboot and if you want to reboot now. Click Yes/ok
Your system must reboot now.

Once back in windows, do the following.

Go to ADD/REMOVE Programs and uninstall the following.

Yazzle
YazzleActiveX
Purityscan
Snowballwars
Cowabanga

( or anything else with OIN in the name )

If these aren't present, run this OIN Uninstaller - http://www.outerinfo.com/OiUninstaller.exe

Reboot your computer and navigate to C/Program Files and delete any of the above folders if still present.

Then, Download VundoFix.exe - http://www.atribune.org/ccount/click.php?id=4 to your desktop.

* Double-click VundoFix.exe to run it.
* Click the Scan for Vundo button.
* Once it's done scanning, click the Remove Vundo button.
* You will receive a prompt asking if you want to remove the files, click YES
* Once you click yes, your desktop will go blank as it starts removing Vundo.
* When completed, it will prompt that it will reboot your computer, click OK.

Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.

Run SmitFraudFix again only using option #1. Post this log along with the contents of C:\vundofix.txt and a new HiJackThis log.

11-26-2006, 06:33 AM	#7 (permalink)
edifier Platinum Member Join Date: Jan 2006 Posts: 567	Run 'HJT', select 'Misc.Tools/Delete a File on Reboot" Navigate to - C:\WINDOWS\system32\drvwot.dll Click open.Okay. Hijackthis will tell you that this file will be deleted on next reboot and if you want to reboot now. Click Yes/ok Your system must reboot now. Once back in windows, do the following. Go to ADD/REMOVE Programs and uninstall the following. Yazzle YazzleActiveX Purityscan Snowballwars Cowabanga ( or anything else with OIN in the name ) If these aren't present, run this OIN Uninstaller - http://www.outerinfo.com/OiUninstaller.exe Reboot your computer and navigate to C/Program Files and delete any of the above folders if still present. Then, Download VundoFix.exe - http://www.atribune.org/ccount/click.php?id=4 to your desktop. * Double-click VundoFix.exe to run it. * Click the Scan for Vundo button. * Once it's done scanning, click the Remove Vundo button. * You will receive a prompt asking if you want to remove the files, click YES * Once you click yes, your desktop will go blank as it starts removing Vundo. * When completed, it will prompt that it will reboot your computer, click OK. Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot. Run SmitFraudFix again only using option #1. Post this log along with the contents of C:\vundofix.txt and a new HiJackThis log.