HijackThis log

[PaulB]

I found another control set, ControlSet003, so I did the same thing with the .reg file there too.

What are the control sets? I only have one hardware profile.

Paul

[LonnyRJones]

Are there any problems now ?

[PaulB]

No, I don't think there any any problems. I haven't seen anything all day.

Paul

[PaulB]

For anyone who is following this and is curious about control sets, it is explained here:

What are Control Sets? What is CurrentControlSet?
http://support.microsoft.com/default...b;en-us;100010

In my case:
ControlSet001 is the Current and Default control set.
ControlSet003 is the LastKnownGood control set (which I now cleaned in the same way, but the files references were missing anyway)

Paul

[LonnyRJones]

Good you found the kb article

We only realy need be concerned with CurrentControlSet


Put in place a good hosts file
http://www.mvps.org/winhelp2002/hosts.htm
How To Download and Extract the HOSTS file:
http://www.mvps.org/winhelp2002/hosts2.htm
Replace it about monthly
How did that go ?
To help avoid reinfection see "So how did I get infected in the first place?"
http://forums.spybot.info/showthread.php?t=279

[PaulB]

Thanks. Unfortunately, I still don't know how I got infected. My Internet Explorer settings are all secure and I did not consent to running any new executable for several weeks.

I have Windows Firewall, Windows Antispyware, Symantec Antivirus,CA Internet Security Suite and a hardware firewall, as well as a lot of experience in Windows development (and the sense not to click "Yes" and "Install ActiveX Control"!).

Paul

[LonnyRJones]

Post back in a couple days and let us know if all is still ok please

[PaulB]

All is still okay.

Paul

[LonnyRJones]

Great news
Thanks for posting back

Im Glad we could help
Since the problems are solved Im going to close the topic now, this keeps others with similar problems from posting there logs/question here, they should start a new topic.
If you should need to post another log for the same PC let me know.