<>
- Thread starter s_m_w_d
- Start date
GameMaster
New Member
You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.
Next, please reboot your computer in Safe Mode by doing the following:
Once in Safe Mode, double-click on SmitfraudFix.exe
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".
The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt
Warning : running option #2 on a non infected computer will remove your Desktop background
That's it for now, please post a fresh HijackThis log with this rapport.
Next, please reboot your computer in Safe Mode by doing the following:
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
- Instead of Windows loading as normal, a menu with options should appear;
- Select the first option, to run Windows in Safe Mode, then press "Enter".
- Choose your usual account.
Once in Safe Mode, double-click on SmitfraudFix.exe
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".
The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt
Warning : running option #2 on a non infected computer will remove your Desktop background
That's it for now, please post a fresh HijackThis log with this rapport.
GameMaster
New Member
Please open up your HijackThis and choose Do a system scan only.
Check this:
O21 - SSODL: alxvdvm - {2A37277D-63A6-4642-9EFE-830E9E342ABA} - C:\WINDOWS\alxvdvm.dll
Close all open windows except the HijackThis and click Fix Selected.
Please reboot, and tell me is your system running better ; if you don't notice any change post a fresh HijackThis log.
Check this:
O21 - SSODL: alxvdvm - {2A37277D-63A6-4642-9EFE-830E9E342ABA} - C:\WINDOWS\alxvdvm.dll
Close all open windows except the HijackThis and click Fix Selected.
Please reboot, and tell me is your system running better ; if you don't notice any change post a fresh HijackThis log.