Search:

Dear Blade,

I have reset the restore points and gone through the rest of your steps outlined above. I use Firefox and was wondering if you have a similar set of points to enhance protection as...

Hi Blade,

Thanks for the possible explanation. That represents quite a significant update in a single day!

I have deleted the first 2 files, as well as that entire Inbox.dbx file - this...

Hi Blade 81,

Please find below the ESET scan results. It's a bit puzzling but I ran the scan overnight then stupidly closed the window this morning before creating the report, so I had to run...

Hi Blade81,

Sorry it is taking so long. I still have not been able to run the Kaspersky scan in full yet. Please find the first 2 logs - ComboFix and DDS. I'll try and run the Kaspersky scan again...

Morning Blade81,

Just to let you know I am trying to run the Kaspersky online scan - I started it last night at 11pm UK time and it is still running now 7 hours later, but very slowly and taking...

Good evening Blade81,

Took a while to run the scan - I turned off the AVG and ZoneAlarm security as directed but the scan kept losing focus - it ran for 3 hours with no result then a dialogue box...

Hi Blade81,

Thanke for getting back to me. Please find the contents of the MBRCheck logfile below. Apologies for making the last logs difficult to read - I have disable word wrap in notepad as you...

Hi there,
I suspect a virus infection but the symptoms until recently have been subtle - a rogue pop-up tab window opening once in a while using Firefox, and a svchost.exe process running...

Phil

All that was required was the registry fix - Task Manager now back to working like a dream.

Thanks again and take care,
Keith

That's great Phil, many thanks for the time and effort you've put in to this - I really appreciate the help. If you're ever over here in Scotland I'll buy you a beer or two!

Just before winding...

Right then Phil, file deleted manually and this time it showed up in the Hijackthis log as file missing, as it should have according to your instructions. The latest log (fingers crossed) looks...

Hi again Phil, I was unable to find the file xkeyshll.dll - definately not there. I did a full system search in case it was lurking in another directory but no joy. Also couldn't find to delete the...

Hi there, and again thanks for the swift reply. I could not access the second and third sites you suggested - just came up with page not found, but I was able to do the scan at virusscan.jotti.org,...

Lastly the SmitFraudFix log...

SmitFraudFix v2.88

Scan done at 23:07:43.82, 15/09/2006
Run from C:\Documents and Settings\KT\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] -...

Now the ewido log..

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created...

Right, that's great thanks. All done now so here are the three logs. I still get 2 DOS window pop-ups containing netsh.exe on startup, which close after a minute or so.

First the Hijackthis log
...

And the SmitfraudFix log..

SmitFraudFix v2.88

Scan done at 20:38:33.21, 15/09/2006
Run from C:\Documents and Settings\KT\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] -...

Many thanks for the quick response. I have to admit I barged straight into trying to get rid of the virus before properly checking all of your advice. Sorry about that.

Updated Hijack file and...

Finally the ewido log...




---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created...

Here is the Smitfraudfix log..

SmitFraudFix v2.87

Scan done at 0:00:19.92, 14/09/2006
Run from C:\Temp2\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix ran in...

Hi there guys, got a real problem with this one. Have tried everything but it keeps coming back. It first disabled the TaskManager and is now resisting all attempts to remove. I followed the...