cannot remove virtumonde

[Shaba]

Hi

No, that's ok.

Combofix might do that.

Empty these folders:

C:\Users\cami\AppData\LocalLow\Sun\Java\Deployment\cache\6.0
C:\QooBox\Quarantine

Empty Recycle Bin.

Still problems?

[splnddsplntr]

Hi
No, that's ok.
Combofix might do that.
Empty these folders:
C:\Users\cami\AppData\LocalLow\Sun\Java\Deployment\cache\6.0
C:\QooBox\Quarantine
Empty Recycle Bin.
Still problems?

Hi Shaba,

When searching for these folders, I found 107 items for the first one(C:\Users\cami\AppData\LocalLow\Sun\Java\Deployment\
cache\6.0), and 13 items for the second (C:\QooBox\
Quarantine).
Do I delete all of these?

[Shaba]

Hi

Yes

Any other issues?

[splnddsplntr]

Hello Shaba,

Thanks for your help.
Seems to be running smoothly now.
Just a couple of small issues, I hope .

When clicking on IE shortcut, get an error message-
"Cannot find '::{2559a1F4-21D7-11D4-BDAF-00C04F60B9F0}'. Make sure the path or Internet address is correct."
After clicking on OK, 2 IE windows immediately open then reduces to 1.
How do I correct this?
Do I delete these icons from the desktop and toolbar, and create new shortcuts?

Also, have some seemingly suspicious, disabled startup items that are prompting a message.
I'm wondering if these should be deleted, but I can't seem to find how to uninstall them.

Thanks again for your help, my daughter will be happy to have her notebook back.

[Shaba]

Hi

"When clicking on IE shortcut, get an error message-
"Cannot find '::{2559a1F4-21D7-11D4-BDAF-00C04F60B9F0}'. Make sure the path or Internet address is correct."
After clicking on OK, 2 IE windows immediately open then reduces to 1.
How do I correct this?
Do I delete these icons from the desktop and toolbar, and create new shortcuts?"

One option might be repair installation of IE.

"Also, have some seemingly suspicious, disabled startup items that are prompting a message.
I'm wondering if these should be deleted, but I can't seem to find how to uninstall them."

I think that instructions from below will handle i,. If not, please let me know.

First we'll need to backup registry:

Start -> Run -> regedit -> ok. Then File -> Export. Give it a name and press Save.

Save text below as fix.reg on Notepad (save it as all files (*.*)) on Desktop

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0a067bb]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cmds]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MS Juan]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSServer]

It should look like this ->

Doubleclick fix.reg, press Yes and ok.

(In case you are unsure how to create a reg file, take a look here with screenshots.)

Reboot.

[Shaba]

Due to the lack of feedback this Topic is closed.

If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

Everyone else please begin a New Topic.